Cookie-signature Project Cookie-signature — known CVE vulnerabilities

Every CVE whose affected-product data names Cookie-signature Project Cookie-signature, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2016-1000236 — CVSS 4.4 (medium): Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used.