{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.1"}],"component":"cookie-encrypter","cve_ids":["CVE-2024-53441"],"ecosystem":"npm","epss":0.00283,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-h63v-hw6g-x8hp","id":"tcs_01M5KFT9J8TPRRPA12ZY3VD5S2","modified_at":"2024-12-11T21:57:14.153362Z","published_at":"2024-12-09T21:31:02Z","references":["https://osv.dev/vulnerability/GHSA-h63v-hw6g-x8hp","https://nvd.nist.gov/vuln/detail/CVE-2024-53441","https://github.com/ebourmalo/cookie-encrypter/issues/9","https://crypto.stackexchange.com/questions/66085/bit-flipping-attack-on-cbc-mode","https://gist.github.com/mathysEthical/f45f1503f87381090e38a33c50eec971","https://github.com/ebourmalo/cookie-encrypter","https://mathys.reboux.pro/CVE/2024/53441"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-h63v-hw6g-x8hp","url":"https://osv.dev/vulnerability/GHSA-h63v-hw6g-x8hp"}],"summary":"Bit flip attack vulnerability in cookie-encrypter"}