CVE-2026-121554 - cordova-plugin-advanced-http 1.5.0 through 3.3.1 Cookie Leak via Cross-Origin Redirects
CVE ID :CVE-2026-121554 Published : Nov. 3, 2026, 4:17 p.m. | 47 minutes ago Description :cordova-plugin-advanced-http 1.5.0 through 3.3.1 contains an information disclosure vulnerability that leaks cookies to third-party hosts because the JavaScript layer passes jar-built Cookie headers as...