CVE-2024-31999

@festify/secure-session creates a secure stateless cookie session for Fastify. At the end of the request handling, it will encrypt all data in the session with a secret key and attach the ciphertext as a cookie value with the defined cookie name. After that, the session on the server side is...

CVE-2024-31999

@festify/secure-session creates a secure stateless cookie session for Fastify. At the end of the request handling, it will encrypt all data in the session with a secret key and attach the ciphertext as a cookie value with the defined cookie name. After that, the session on the server side is...

@artgenio/core (>=0.6.3 <=0.7.1), @assert-server/core (>=1.0.0 <=1.0.2) +21 more potentially affected by CVE-2024-31999 via @fastify/secure-session (>=4.1.1 <=7.1.0)

@fastify/secure-session NPM version =4.1.1, =0.6.3, =1.0.0, =1.1.2, =1.0.0, =1.0.1, =0.1.1, =0.1.0, =0.7.0, =1.0.8, =0.5.1, =0.1.4, =0.0.1, =0.0.1, =1.0.0-1, =1.0.0-3 and more Source cves: CVE-2024-31999 Source advisory: OSV:GHSA-9WWP-Q7WQ-JX35...