BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the Secure flag for a cookie.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-29248.json"