jQuery Cookie 1.4 Release Notes

Notes

• Full Version: @neverendingsupport/jquery-cookie@1.4.1-jquery-cookie-1.4.3

Bug Fixes

• Avoid the use of the potentially vulnerable jQuery.extend() helper.
  • This is being done purely out of an abundance of caution in order to address CVE-2022-23395, even though it is actually a false positive. The actual vulnerability lies in certain versions of jQuery (see CVE-2019-11358) and the vulnerable code path was never triggered by the uses in jQuery Cookie anyway.