TI-2026-84360 CVE-2026-121554 · GHSA-gj8w-9f6j-v33q
Cookie leak on redirects in cordova-plugin-advanced-http
Priority LOW 36
cordova-plugin-advanced-http 1.5.0 through 3.3.1 contains an information disclosure vulnerability that leaks cookies to third-party hosts because the JavaScript layer passes jar-built Cookie headers as ordinary request h…