jQuery Cookie

1.4.3 (NES)

Notes

• Full Version: 1.4.1-jquery-cookie-1.4.3

Bug Fixes

• Avoid the use of the potentially vulnerable jQuery.extend() helper.
  • This is being done purely out of an abundance of caution in order to address CVE-2022-23395, even though it is actually a false positive. The actual vulnerability lies in certain versions of jQuery (see CVE-2019-11358) and the vulnerable code path was never triggered by the uses in jQuery Cookie anyway.

1.4.2 (NES)

Notes

• This release contains no functional change from the OSS jQuery Cookie v1.4.1.
• This release mainlines OSS v1.4.1 into NES v1.4.2.
• Full Version: 1.4.1-jquery-cookie-1.4.2