Jusb3 managed to spoof cookies via Padding Oracle Attack and also would be able to read the contents of the encrypted cookie via CRIME attack.
The cipher i used is/was aes-256-cbc
Both issues have been fixed by Jusb3 via two pull requests.
Thanks from my side to you, Jusb3!
The geeks shall inherit the properties and methods of object earth.