CVE-2017-18589: Cookie Project Cookie

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic.

Affected products

• Cookie Project Cookie: before 0.7.6 (fixed in 0.7.6)

Published 2019-08-26. Last modified 2026-06-17.