---
title: "cookie security advisories"
description: "1 known security advisory for cookie, with the versions they affect and the version that fixes each."
url: https://inlinr.com/packages/cookie/security
lang: en
---

[Packages](https://inlinr.com/packages)

# cookie

2.0.1 · 30 Jun 2026 MIT 314.8M / week [Repository](https://github.com/jshttp/cookie) [Homepage](https://github.com/jshttp/cookie#readme) [npm](https://www.npmjs.com/package/cookie) [Atom feed](https://inlinr.com/packages/feed/cookie)

Your version 

## Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

| Line | Newest | Where it stands                                                          |
| ---- | ------ | ------------------------------------------------------------------------ |
|      | 2.0.1  | No known advisory                                                        |
|      | 1.1.1  | No known advisory                                                        |
|      | 0.6.0  | 7 open advisories, worst low  · last release Nov 2023, no longer updated |

- Low  
[cookie accepts cookie name, path, and domain with out of bounds characters](https://inlinr.com/advisories/GHSA-pxg6-pf52-xh8x)GHSA-pxg6-pf52-xh8x · 4 Oct 2024

### Quality and security signals

What [npm](https://www.npmjs.com/package/cookie) and [deps.dev](https://deps.dev/npm/cookie) say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 4 Nov 2026\. Releases and advisories last read 4 Nov 2026.