02:58
2026-08-05
hackzero.ai
ai-safety
Cookies leaked to the wrong host: a URL parsing differential in tough-cookie
A URL parsing differential in tough-cookie, a widely used Node.js cookie library, can leak cookies to the wrong host, according to a report from hackzero.ai. The vulnerability arises from inconsistent…