[MEDIUM] Cookie leakage to wrong origins and non-restricted cookie acceptance

PKSA-rb93-9z4x-jb66 GHSA-gm98-g2wf-7c68

Affected version: >=2,<2.0.6|<1.0.6

Reported by:
FriendsOfPHP/security-advisories, GitHub