Skip to content
OpenAdvisories

Package · Debian

node-js-cookie

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-46625

    JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection

    JavaScript Cookie is a JavaScript API for handling cookies, client-side. Prior to version 3.0.7, js-cookie's internal assign() helper copies properties with for...in + plain assignment. When the source object is produced by JSON.parse, the JSON object's "__pr…

    js-cookie js-cookie node-js-cookie js-cookie Debian Ubuntu npm