@hotwired/turbo vulnerabilities (npm)

1 vulnerability.

• @hotwired/turbo npm Turbo Frame responses can restore stale session cookies CVE-2025-66803 Fix available 4.8 MediumJanuary 20, 2026