Cookie-signature Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Cookie-signature Project records in CISA KEV

No Cookie-signature Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2016-09354 CVE-2016-1000236 · GHSA-92vm-wfm5-mxvv

LOW 22

Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used.

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00896 Published 2019-11-19 Partial fix · 1.0.4 CWE-362