Launchpad.net

CVE 2022-23395

jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting (XSS).

See the CVE page on Mitre.org for more details.