Bug report

low │ cookie accepts cookie name, path, and domain with out │
│ │ of bounds characters │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ Package │ cookie │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ Vulnerable versions │ <0.7.0 │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ Patched versions │ >=0.7.0 │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ Paths │ . > @supabase/ssr@0.5.1 > cookie@0.6.0 │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ More info │ GHSA-pxg6-pf52-xh8x

• [ x] I confirm this is a bug with Supabase, not with my own application.
• [ x] I confirm I have searched the Docs, GitHub Discussions, and Discord.

Describe the bug

A clear and concise description of what the bug is.

To Reproduce

Steps to reproduce the behavior, please provide code snippets or a repository:

1. Go to '…'
2. Click on '…'
3. Scroll down to '…'
4. See error

Expected behavior

A clear and concise description of what you expected to happen.

Screenshots

If applicable, add screenshots to help explain your problem.

System information

• OS: [e.g. macOS, Windows]
• Browser (if applies) [e.g. chrome, safari]
• Version of supabase-js: [e.g. 6.0.2]
• Version of Node.js: [e.g. 10.10.0]

Additional context

Add any other context about the problem here.