Sensitive Cookie in HTTPS Session Without "Secure" Attribute

Overview Affected versions of this package are vulnerable to Sensitive Cookie in HTTPS Session Without "Secure" Attribute in the setSessionCookie process. An attacker can access sensitive session information by intercepting cookies transmitted over unsecured channels. Remediation There is no fixe...