jshttp
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| cookie | 1 | – | Oct 4, 2024 |
| on-headers | 1 | – | Jul 17, 2025 |
Exploited and recent CVEs
- CVE-2025-7339 on-headers vulnerable to http response header manipulation 0.2%
- CVE-2024-47764 cookie accepts cookie name, path, and domain with out of bounds characters 0.7%