CVE:CVE-2016-1000236
CNNVD:CNNVD-201911-1159
Node-cookie-signature是一款用于获得或取消Cookie签名的软件包。
Node-cookie-signature 1.0.6之前版本中存在安全漏洞。攻击者可利用该漏洞实施时序攻击。
solution:Upgrade cookie-signature_project cookie-signature to a higher version than 1.0.6,and avoid the version (,1.0.6); Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0