Vulnerabilities in cookie 0.4.2