# What changed in cookies

> 1 change in cookies 0.9 from its official release notes, upgrade guides and advisories: 1 security. Each one cited. Sources checked 2026-10-24. HTML: https://unstale.sh/npm/cookies/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## cookies 0.9

### Security

- Fixed CVE-2026-88038 and aligned path and domain validation with the cookie package. (0.9.2) — [release notes](https://github.com/pillarjs/cookies/releases/tag/v0.9.2)