CVE-2024-47764
1 advisory.
npm/cookie CVE-2024-47764: medium 6.9, EPSS 0.74%
cookie accepts cookie name, path, and domain with out of bounds characters
Action: Upgrade cookie to 0.7.0 or later.
npm i cookie@0.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.0 | - |
Fixed versions
| 0.7.0 |
Sources
- osv: GHSA-pxg6-pf52-xh8x
- nvd: CVE-2024-47764
- https://github.com/jshttp/cookie/security/advisories/GHSA-pxg6-pf52-xh8x
- https://github.com/jshttp/cookie/pull/167
- https://github.com/jshttp/cookie/commit/e10042845354fea83bd8f34af72475eed1dadf5c
- https://github.com/jshttp/cookie
CVE-2024-47764 · published · modified · JSON