npm / js-cookie
js-cookie
What changed in js-cookie 3, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-17.
1 security4 fixes and other
js-cookie 35 changes
Security 1
Prevents cookie attribute injection associated with CVE-2026-46625.
Fixes and other changes 4
ES5 compatibility was restored after being inadvertently broken in 3.0.7.
The Node version restriction was lifted after 3.0.7 inadvertently restricted Node to version 20 or newer.
Ensures consistent behavior between get('name') and get().
The package is published to npm exclusively through a trusted publisher.