Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script.
"https://github.com/pypa/advisory-database/blob/main/vulns/apache-atlas/PYSEC-2017-106.yaml"