AIKIDO-2025-10849

TL;DR

Affected versions of this package are vulnerable due to insufficient input validation in multiple parts of the codebase, particularly when parsing JSON data for cookies or localStorage entries such as GUID, session, backups, or inbox. Because these values are processed without proper validation or sanitization, an attacker can supply malformed or malicious JSON that triggers unexpected behavior, potentially leading to data corruption, application errors, or further exploitation depending on how the parsed data is used.