https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 00:19:17 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2024-53441 <p>An issue in the index.js decryptCookie function of cookie-encrypter v1.0.1 allows attackers to execute a bit flipping attack.</p> <p>An issue in the index.js decryptCookie function of cookie-encrypter v1.0.1 allows attackers to execute a bit flipping attack.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2024-53441 https://vulnerability.circl.lu/vuln/ghsa-h63v-hw6g-x8hp <p><strong>Affected:</strong> npm: cookie-encrypter</p> <p>due to a weakness in the encryption method used in cookie-encrypter an attack can use the world visible IV to edit encrypted cookies without decrypting the cookie itself. This is known as an AES CBC bit flipping attack.</p> <p><strong>Affected:</strong> npm: cookie-encrypter</p> <p>due to a weakness in the encryption method used in cookie-encrypter an attack can use the world visible IV to edit encrypted cookies without decrypting the cookie itself. This is known as an AES CBC bit flipping attack.</p> https://vulnerability.circl.lu/vuln/ghsa-h63v-hw6g-x8hp