Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar.
{ "urgency": "not yet assigned" }