Lucene search
SnykCVELIST:CVE-2023-26136HistoryJul 01, 2023 - 5:00 a.m.
CVE-2023-26136
2023-07-0105:00:01
snyk
raw.githubusercontent.com
tough-cookie
4.1.3
prototype pollution
cookies
cookiejar
Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.
Related
redhatcve
redhatcve
CVE-2023-26136
2023-07-06 05:57:18
ubuntucve
ubuntucve
CVE-2023-26136
2023-07-01 00:00:00
veracode
veracode
Prototype Pollution
2023-07-11 07:35:18
github
github
tough-cookie Prototype Pollution vulnerability
2023-07-01 06:30:16
ibm
ibm
Security Bulletin: IBM Event Streams is affected by a remote code execution vulnerability (CVE-2023-26136).
2024-02-13 11:00:04
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0080)
2024-04-05 00:00:00
Debian: Security Advisory (DLA-3488-1)
2023-07-11 00:00:00
Fedora: Security Advisory for yarnpkg (FEDORA-2024-5ecc250449)
2024-02-28 00:00:00
mageia
mageia
Updated nodejs-tough-cookie packages fix security vulnerability
2024-03-22 03:19:51
osv
osv
tough-cookie Prototype Pollution vulnerability
2023-07-01 06:30:16
CVE-2023-26136
2023-07-01 05:15:16
node-tough-cookie - security update
2023-07-10 00:00:00
debiancve
debiancve
CVE-2023-26136
2023-07-01 05:15:16
cgr
cgr
CVE-2023-26136 vulnerabilities
2024-05-19 03:07:16
nessus
nessus
Debian DLA-3488-1 : node-tough-cookie - LTS security update
2023-07-11 00:00:00
Fedora 39 : yarnpkg (2024-28fc0c2ef4)
2024-02-28 00:00:00
Fedora 38 : yarnpkg (2024-5ecc250449)
2024-02-28 00:00:00
debian
debian
[SECURITY] [DLA 3488-1] node-tough-cookie security update
2023-07-10 20:35:55
prion
prion
Code injection
2023-07-01 05:15:00
cve
cve
CVE-2023-26136
2023-07-01 05:15:16
fedora
fedora
[SECURITY] Fedora 39 Update: yarnpkg-1.22.21-2.fc39
2024-02-28 01:10:55
[SECURITY] Fedora 38 Update: yarnpkg-1.22.21-2.fc38
2024-02-28 01:41:33
