Skip to content
OpenAdvisories

Package · npm

csrf-csrf

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low —
    GHSA-jjmg-x456-w976

    Incorrect default cookie name and recommendation

    ### Impact _What kind of vulnerability is it? Who is impacted?_ The default cookie name (and documentation recommendation) was prefixed with `Host__` instead of `__Host-`. The point of this prefix is for additional security, to ensure that, when no domain opt…

    csrf-csrf npm