Skip to content

cordova-plugin-advanced-http

Follow this package

Get the evidence behind this dependency. Browse imported advisories below, or check an exact version against OSV now. View source coverage.

Behind the package

View on npm

Explore what the publisher declares for the latest npm release. These details are not a safety score; listed attestations have not been independently verified here.

Cordova / Phonegap plugin for communicating with HTTP servers using SSL pinning

Latest release3.3.1
Declared licenseMIT
Listed maintainerssilkimen
Runtime dependencies0
Install-time scriptsNone declared
Integrity metadataRecorded by registry
Attestation metadataNot recorded
Registry deprecationNot marked deprecated

Fetched 15/11/2026, 04:58:59 UTC · Original registry metadata

Release history

Explore up to 40 recent releases. Pick a version for an OSV check; registry metadata alone does not tell you whether a release has known vulnerabilities.

Check the version you ship.

Get a fresh OSV lookup for an exact release. We send the package name and version to OSV without storing a report.

Advisories & recorded fixes

high8.2
CVE-2026-121554

cordova-plugin-advanced-http 1.5.0 through 3.3.1 Cookie Leak via Cross-Origin Redirects

cordova-plugin-advanced-http 1.5.0 through 3.3.1 contains an information disclosure vulnerability that leaks cookies to third-party hosts because the JavaScript layer passes jar-built Cookie headers as ordinary request headers. When a request is redirected to another host via an open or attacker-influenced redirect, native iOS and Android stacks forward the Cookie header, letting attackers hijack user sessions.

No structured fix or guidance is available here. Check the latest publisher advisory.

Exploitation not established

silkimen · cordova-plugin-advanced-http