Skip to content
OpenAdvisories

Package · npm

rails-session-decoder

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-44vf-8ffm-v2qh

    Sensitive Data Exposure in rails-session-decoder

    All versions of `rails-session-decoder` are missing verification of the Message Authentication Code appended to the cookies. This may lead to decryption of cipher text thus exposing encrypted information. ## Recommendation No fix is currently available. Consi…

    rails-session-decoder npm