Skip to content
OpenAdvisories

Package · Debian

node-cookies

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 4.8
    CVE-2026-88038

    cookies vulnerable to Set-Cookie attribute injection via unvalidated domain and path options

    cookies is a Node.js library for reading and writing HTTP cookies, used by Koa via ctx.cookies. In versions before 0.9.2 the library validates the cookie name and value against character sets that reject the semicolon separator, but the domain and path option…

    cookies cookies node-cookies node-cookies Debian Ubuntu