cbcvebase.

Cookiejar Project Cookiejar vulnerabilities

1 known vulnerability affecting cookiejar_project/cookiejar.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2022-25901P3HIGHCVSS 7.5≤ 2.1.3fixed in 2.1.42023-01-18
CVE-2022-25901 [HIGH] CWE-1333 CVE-2022-25901: Versions of the package cookiejar before 2.1.4 are vulnerable to Regular Expression Denial of Servic Versions of the package cookiejar before 2.1.4 are vulnerable to Regular Expression Denial of Service (ReDoS) via the Cookie.parse function, which uses an insecure regular expression.
ghsanvdosv
Cookiejar Project Cookiejar vulnerabilities | cvebase