js-cookie vulnerabilities (Root)

1 vulnerability.

• js-cookie Root JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection CVE-2026-46625 Fix available 7.5 HighMay 21, 2026