{"uuid": "11c591a3-8f98-4151-a897-3fd6d6738806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-v3r7-h72x-cjcm", "type": "seen", "source": "https://bsky.app/profile/nodeland.dev/post/3mrsa2mxyaw2c", "content": "GHSA-v3r7-h72x-cjcm (medium): unsanitized `domain` and `unparsed` values in `setCookie()` allowed cookie attribute injection. Domains, paths and unparsed attributes are validated more strictly now.\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-07-29T15:21:09.249453Z"}