Beveiligingsadvies

CVE-2023-26136

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-07-01 05:00:01

Laatst bijgewerkt 2025-08-27 20:32:53

Toegewezen door snyk

CVSS-score 6.5

Status PUBLISHED

Beschrijving

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.

← Alle CVE's bekijken Bekijk op cve.org ↗