From ce08204eea30a2c416c18fa5ceab651c49e539f8 Mon Sep 17 00:00:00 2001 From: Ali Jaafer <93264687+i5d6@users.noreply.github.com> Date: Wed, 18 Feb 2026 22:52:23 +0300 Subject: [PATCH] Update cookie package version to 0.7.0 cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to 0.7.0, which updates the validation for name, path, and domain. --- examples/sveltekit-example/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/examples/sveltekit-example/package.json b/examples/sveltekit-example/package.json index 1c46641d..e727373e 100644 --- a/examples/sveltekit-example/package.json +++ b/examples/sveltekit-example/package.json @@ -16,7 +16,7 @@ "@tailwindcss/vite": "4.0.15", "@vercel/edge": "^1.2.1", "@vercel/toolbar": "0.1.36", - "cookie": "^0.6.0", + "cookie": "^0.7.0", "flags": "workspace:*", "tailwindcss": "4.0.15" },