Fixed #20444 -- Cookie-based sessions does not include a remote code execution warning