Lucene search
PRIOn knowledge basePRION:CVE-2023-26136HistoryJul 01, 2023 - 5:15 a.m.
Code injection
2023-07-0105:15:00
PRIOn knowledge base
www.prio-n.com
11
package vulnerability
cookiejar handling
prototype pollution
initialization issue
nvd
Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.
References
github.com/salesforce/tough-cookie/commit/12d474791bb856004e858fdb1c47b7608d09cf6e
github.com/salesforce/tough-cookie/issues/282
github.com/salesforce/tough-cookie/releases/tag/v4.1.3
lists.debian.org/debian-lts-announce/2023/07/msg00010.html
lists.fedoraproject.org/archives/list/[email protected]/message/3HUE6ZR5SL73KHL7XUPAOEL6SB7HUDT2/
lists.fedoraproject.org/archives/list/[email protected]/message/6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ/
security.snyk.io/vuln/SNYK-JS-TOUGHCOOKIE-5672873
Related
ubuntucve
ubuntucve
CVE-2023-26136
2023-07-01 00:00:00
veracode
veracode
Prototype Pollution
2023-07-11 07:35:18
redhatcve
redhatcve
CVE-2023-26136
2023-07-06 05:57:18
github
github
tough-cookie Prototype Pollution vulnerability
2023-07-01 06:30:16
ibm
ibm
Security Bulletin: Decision Optimization in IBM Cloud Pak for Data is affected by a tough-cookie Prototype Pollution vulnerability (CVE-2023-26136)
2023-09-08 08:42:56
nessus
nessus
RHEL 8 : tough-cookie (Unpatched Vulnerability)
2024-06-03 00:00:00
Debian DLA-3488-1 : node-tough-cookie - LTS security update
2023-07-11 00:00:00
Fedora 38 : yarnpkg (2024-5ecc250449)
2024-02-28 00:00:00
osv
osv
CGA-hf6q-478m-mm8p
2024-06-06 12:26:02
tough-cookie Prototype Pollution vulnerability
2023-07-01 06:30:16
CVE-2023-26136
2023-07-01 05:15:16
cve
cve
CVE-2023-26136
2023-07-01 05:15:16
nvd
nvd
CVE-2023-26136
2023-07-01 05:15:16
debiancve
debiancve
CVE-2023-26136
2023-07-01 05:15:16
mageia
mageia
Updated nodejs-tough-cookie packages fix security vulnerability
2024-03-22 03:19:51
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0080)
2024-04-05 00:00:00
Debian: Security Advisory (DLA-3488-1)
2023-07-11 00:00:00
Fedora: Security Advisory for yarnpkg (FEDORA-2024-28fc0c2ef4)
2024-02-28 00:00:00
cvelist
cvelist
CVE-2023-26136
2023-07-01 05:00:01
cgr
cgr
CVE-2023-26136 vulnerabilities
2024-05-19 03:07:16
ics
ics
Subnet Solutions PowerSYSTEM Center
2024-07-18 12:00:00
debian
debian
[SECURITY] [DLA 3488-1] node-tough-cookie security update
2023-07-10 20:35:36
fedora
fedora
[SECURITY] Fedora 39 Update: yarnpkg-1.22.21-2.fc39
2024-02-28 01:10:55
[SECURITY] Fedora 38 Update: yarnpkg-1.22.21-2.fc38
2024-02-28 01:41:33
redhat
redhat
redos
redos
ROS-20240704-07
2024-07-04 00:00:00