A vulnerability has been discovered in the cookie library

[DiFuks]

A vulnerability has been discovered in the cookie library. This has been fixed in version 0.7.0. Unfortunately, importmap-overrides is tightly bound to version 0.6.*.

[joeldenning]

The vulnerability is low severity and, as far as I can tell, does not impact import-map-overrides, since import-map-overrides only uses cookie.parse() rather than cookie.serialize(), and jshttp/cookie#167 seems to have only changed the serialize() function. There are currently no tests for import-map-overrides-server.js, so upgrading cookie to 0.7 or 1.0 can't be done safely without first adding tests.

Closing this since the issue doesn't impact import-map-overrides