PatchTheCVEcookies and content security policy vulnerabilities and fixes
Recent CVEs affecting cookies and content security policy, with upgrade or downgrade steps. 1 tracked.
Also searched as: cookiesandcontentsecuritypolicy.
cookies and content security policy has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-08-19. Highest priority: CVE-2025-51529 (score 38/100).
- CVE-2025-51529 MEDIUM 5.3 UPGRADE Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy
FAQ
How do I fix cookies and content security policy vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cookies and content security policy being exploited right now?
None of the tracked cookies and content security policy CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cookies and content security policy CVE should I patch first?
CVE-2025-51529 currently ranks highest (38/100): Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy.