CVE-2026-47675 Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the serialize function in hono/cookie validates domain and path options against characters that corrupt Set-Cookie header syntax ;, \r, \n, but does not apply the same validation to sameSite an...

Arbitrary user login vulnerability in DeDecms cookie.helper.php file

Weaving dream content management system DedeCms is a PHP open source website management system. There is an arbitrary user login vulnerability in the DeDecms cookie.helper.php file. Attackers can use the vulnerability to bypass the security checks , login any user...