Cookie Project Cookie vulnerabilities

CVE-2024-47764 [LOW] CWE-74 cookie accepts cookie name, path, and domain with out of bounds characters cookie accepts cookie name, path, and domain with out of bounds characters ### Impact The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. For example, `serialize("userName=alert('XSS3'); Max-Age=2592000; a", value)` would result in `"userName=alert('XSS3'); Max-Age=2592000; a=test"`, setting `userName` cookie to `` and ignoring `value`. A

CVE-2017-18589 [HIGH] CWE-20 CVE-2017-18589: An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic.