← Database

CVE-2022-25901

MEDIUM CVSS: 5.3 Published: 2023-01-18 Modified: 2026-06-17

Description

Versions of the package cookiejar before 2.1.4 are vulnerable to Regular Expression Denial of Service (ReDoS) via the Cookie.parse function, which uses an insecure regular expression.

Affected Platforms

Cookiejar Project Cookiejar

Weakness Type

CWE-1333, CWE-1333

References