Lucene search
GoogleOSV:CVE-2023-26136HistoryJul 01, 2023 - 5:15 a.m.
CVE-2023-26136
2023-07-0105:15:16
Google
osv.dev
7
tough-cookie
prototype pollution
cookiejar
Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.
References
github.com/salesforce/tough-cookie/commit/12d474791bb856004e858fdb1c47b7608d09cf6e
github.com/salesforce/tough-cookie/issues/282
github.com/salesforce/tough-cookie/releases/tag/v4.1.3
lists.debian.org/debian-lts-announce/2023/07/msg00010.html
lists.fedoraproject.org/archives/list/[email protected]/message/3HUE6ZR5SL73KHL7XUPAOEL6SB7HUDT2/
lists.fedoraproject.org/archives/list/[email protected]/message/6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ/
security.snyk.io/vuln/SNYK-JS-TOUGHCOOKIE-5672873
Related
github
github
tough-cookie Prototype Pollution vulnerability
2023-07-01 06:30:16
veracode
veracode
Prototype Pollution
2023-07-11 07:35:18
ubuntucve
ubuntucve
CVE-2023-26136
2023-07-01 00:00:00
redhatcve
redhatcve
CVE-2023-26136
2023-07-06 05:57:18
ibm
ibm
Security Bulletin: Decision Optimization in IBM Cloud Pak for Data is affected by a tough-cookie Prototype Pollution vulnerability (CVE-2023-26136)
2023-09-08 08:42:56
cve
cve
CVE-2023-26136
2023-07-01 05:15:16
nessus
nessus
Debian DLA-3488-1 : node-tough-cookie - LTS security update
2023-07-11 00:00:00
Fedora 38 : yarnpkg (2024-5ecc250449)
2024-02-28 00:00:00
Fedora 39 : yarnpkg (2024-28fc0c2ef4)
2024-02-28 00:00:00
debian
debian
[SECURITY] [DLA 3488-1] node-tough-cookie security update
2023-07-10 20:35:55
cgr
cgr
CVE-2023-26136 vulnerabilities
2024-05-19 03:07:16
openvas
openvas
Debian: Security Advisory (DLA-3488-1)
2023-07-11 00:00:00
Mageia: Security Advisory (MGASA-2024-0080)
2024-04-05 00:00:00
Fedora: Security Advisory for yarnpkg (FEDORA-2024-5ecc250449)
2024-02-28 00:00:00
osv
osv
node-tough-cookie - security update
2023-07-10 00:00:00
tough-cookie Prototype Pollution vulnerability
2023-07-01 06:30:16
prion
prion
Code injection
2023-07-01 05:15:00
debiancve
debiancve
CVE-2023-26136
2023-07-01 05:15:16
mageia
mageia
Updated nodejs-tough-cookie packages fix security vulnerability
2024-03-22 03:19:51
cvelist
cvelist
CVE-2023-26136
2023-07-01 05:00:01
fedora
fedora
[SECURITY] Fedora 39 Update: yarnpkg-1.22.21-2.fc39
2024-02-28 01:10:55
[SECURITY] Fedora 38 Update: yarnpkg-1.22.21-2.fc38
2024-02-28 01:41:33
