Javascript Cookie vulnerabilities

1 known vulnerability in Javascript Cookie from Js-cookie. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  js-cookie: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2026-46625Jun 10, 2026Js-cookie

  JavaScript Cookie is a JavaScript API for handling cookies, client-side. Prior to version 3.0.7, js-cookie's internal assign() helper copies properties with for...in + plain assignment. When the source object is produced by JSON.parse, the JSON object's "__pro