8 matches found
Injection js-cookie Dependency in Bitbucket Data Center
This High severity Injection vulnerability was introduced in versions 9.4.12, 10.0.1, 10.1.1, 10.2.0, and 10.3.0 of Bitbucket Data Center. This Injection vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N allows an unauthenticated attacker to...
ROOT-APP-NPM-CVE-2026-46625 CVE-2026-46625 in @rootio/js-cookie - Patched by Root
Root has patched CVE-2026-46625 in the @rootio/js-cookie package for Root:npm. Multiple fixed versions available...
Prototype Pollution
Overview js-cookie is an A simple, lightweight JavaScript API for handling cookies Affected versions of this package are vulnerable to Prototype Pollution via the assign function. An attacker can inject arbitrary cookie attributes by supplying a crafted JSON object containing a proto property,...
OPENSUSE-SU-2026:10349-1 ruby4.0-rubygem-http-cookie-1.0.8-1.3 on GA media
These are all security issues fixed in the ruby4.0-rubygem-http-cookie-1.0.8-1.3 package on the GA media of openSUSE Tumbleweed...
AZL-50085 CVE-2024-47764 affecting package js-jquery 3.5.0-4
cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to...
UBUNTU-CVE-2024-47764
cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to...
PT-2024-32802
Name of the Vulnerable Software and Affected Versions cookie versions prior to 0.7.0 Description The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields ...