DigitalBazaar Forge input validation error vulnerability

Versions prior to 1.4.1 of digitalbazaar forge contain an input validation error vulnerability. This vulnerability arises because the forge.http client stores the cookie name and path from the Set-Cookie response header within a regular JavaScript object. A malicious server can exploit special...