Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/05/21 6:9 p.m.19 views

@fastify/session reuses destroyed session cookie

Impact When restoring the cookie from the session store, the expires field is overriden if the maxAge field was set. This means a cookie is never correctly detected as expired and thus expired sessions are not destroyed. Patches Updating to v10.9.0 will solve this. Workarounds None References...

7.4CVSS7AI score0.00445EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder