jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting (XSS).
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23395.json"