Skip to content
OpenAdvisories

Package · Packagist

amphp/artax

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium —

    amphp/artax Cookie leakage to wrong origins and non-restricted cookie acceptance

    In artax version before 1.0.6 and 2 before 2.0.6, cookies of `foo.bar.example.com` were leaked to `foo.bar`. Additionally, any site could set cookies for any other site. Artax fixed this issue by following newer browser implementations now. Cookies can only b…