What’s Vulnerable › Vulnerabilities

CVE-2024-53441

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-09 · updated 2026-06-17
• Weakness: CWE-327

Description

An issue in the index.js decryptCookie function of cookie-encrypter v1.0.1 allows attackers to execute a bit flipping attack.

References

• https://gist.github.com/mathysEthical/f45f1503f87381090e38a33c50eec971
• https://mathys.reboux.pro/CVE/2024/53441

Get alerted when CVE-2024-53441 or the next vulnerability affects your stack