cookie-signature

1.2.2 · 29 Oct 2024MIT198.1M / weekRepository Homepage npm Atom feed

Your version

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Line	Newest	Where it stands
	1.2.2	Safe from 1.0.4
	0.0.1	1 open advisory, worst moderate · last release Oct 2012, no longer updated

Moderate
cookie-signature Timing AttackGHSA-92vm-wfm5-mxvv · 6 Jan 2020
fixed in 1.0.4

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Reading releases, release notes and advisories…

Registry facts last checked 2 Nov 2026. Releases and advisories last read 2 Nov 2026.