tough-cookie-patch-cve-2023-26136

RFC6265 Cookies y CookieJar para Node.js Sinopsis javascript var tough = require'tough-cookie'; var Cookie = tough.Cookie; var cookie = Cookie.parseheader; cookie.value = 'somethingdifferent'; header = cookie.toString; var cookiejar = new tough.CookieJar; cookiejar.setCookiecookie,...

Tough-Cookie-v2.5.0-Patched

Tough-Cookie v2.5.0 补丁 - 原型污染修复 概述 本仓库包含 tough-cookie 包 2.5.0 版本的补丁版本，以解决关键的 原型污染 漏洞（CVE-2023-26136）。该漏洞允许攻击者通过向 JavaScript 对象注入属性来操纵原型链。这可能导致意外行为、安全风险（如远程代码执行）以及依赖该包的应用程序中的兼容性问题。 漏洞描述 在 tough-cookie 包的 v4.1.3 之前的版本中，当使用 CookieJar 并设置 rejectPublicSuffixes=false 模式时，容易受到 原型污染 的攻击。该漏洞源于对 Cookie...

tough-cookie-2.5.0-cve-2023-26136-fix

Corrección para CVE-2023-26136 en tough-cookie 2.5.0 Resumen de la misión Este proyecto aborda CVE-2023-26136 , una vulnerabilidad crítica de contaminación de prototipos en versiones de tough-cookie anteriores a la 4.1.3. La vulnerabilidad afecta a la aplicación web de Penguin Software Inc., que...

Open-Source-Seal-Security

SEAL SECURITY 项目：开源工程师任务 创建包 tough-cookie V2.5.0 的新版本，用于修复关键漏洞 CVE-2023-26136，项目使用 Node.js V20 编写 包 tough-cookie 的 4.1.3 之前的版本存在原型污染漏洞，原因是在使用 CookieJar 且 rejectPublicSuffixes=false 模式时对 Cookie 的处理不当。该问题源于对象的初始化方式。 https://nvd.nist.gov/vuln/detail/CVE-2023-26136 原型污染是一种影响 JavaScript...

CVE-2023-26136

Investigación sobre la vulnerabilidad CVE-2023-26136 Descripción Las versiones del paquete tough-cookie anteriores a la 4.1.3 son vulnerables a la contaminación de prototipos Prototype Pollution debido al manejo inadecuado de cookies cuando se usa CookieJar en modo rejectPublicSuffixes=false. Est...

SealSecurityAssignment

SealSecurityAssignment 研究漏洞 CVE-2023-26136 漏洞研究：CVE-2023-26136 描述： tough-cookie 包在 4.1.3 之前的所有版本存在原型污染漏洞，原因是在使用 CookieJar 的 rejectPublicSuffixes=false 模式时对 Cookie 处理不当。该问题源于对象初始化方式。 https://nvd.nist.gov/vuln/detail/CVE-2023-26136 引言： 什么是原型污染？ JavaScript...

Astra Linux – Vulnerability in node-tough-cookie

Versions of the tough-cookie package before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in the rejectPublicSuffixes=false mode. This issue arises from the way in which the objects are initialized...

CLSA-2026-1784596273 TuxCare security update for tough-cookie (2 CVEs)

TuxCare rebuilt tough-cookie to address 2 CVEs. Fixed in 2.2.2-tuxcare.1...

CLSA-2026-1784596295 TuxCare security update for tough-cookie (1 CVE)

TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 2.2.2-tuxcare.2...

CLSA-2026-1776818217 TuxCare security update for tough-cookie (1 CVE)

TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 2.3.4-tuxcare.1...

CLSA-2026-1774225211 TuxCare security update for tough-cookie (3 CVEs)

TuxCare rebuilt tough-cookie to address 3 CVEs. Fixed in 1.2.0-tuxcare.1...

CLSA-2026-1773274558 TuxCare security update for tough-cookie (1 CVE)

TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 2.5.0-tuxcare.1...

CLSA-2026-1773274554 TuxCare security update for tough-cookie (1 CVE)

TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 3.0.1-tuxcare.1...

CLSA-2026-1773274553 TuxCare security update for tough-cookie (1 CVE)

TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 2.4.3-tuxcare.1...

CLSA-2026-1773101696 TuxCare security update for tough-cookie (3 CVEs)

TuxCare rebuilt tough-cookie to address 3 CVEs. Fixed in 2.2.0-tuxcare.1...

CLSA-2026-1772583199 TuxCare security update for tough-cookie (3 CVEs)

TuxCare rebuilt tough-cookie to address 3 CVEs. Fixed in 0.12.1-tuxcare.1...

K000162729: NPM tough-cookie vulnerability CVE-2023-26136

Security Advisory Description Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized. CVE-2023-26136...

ROOT-APP-NPM-CVE-2023-26136 CVE-2023-26136 in @rootio/tough-cookie - Patched by Root

Root has patched CVE-2023-26136 in the @rootio/tough-cookie package for Root:npm. Multiple fixed versions available...

Security Bulletin: tough-cookie Prototype Pollution Vulnerability in CookieJar, affects watsonx.data

Summary ough-cookie versions prior to 4.1.3 are vulnerable to prototype pollution when using CookieJar with rejectPublicSuffixes=false due to improper object initialization. Fixed in version 4.1.3. This can affect watsonx.data. Vulnerability Details CVEID:CVE-2023-26136 DESCRIPTION: Versions of t...

Security Bulletin: Vulnerabilities in Eran Hammer cryptiles, PostCSS,Node.js,node-notifier,es5-ext ,MySQL Connectors,json-path and tough-cookie might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Eran Hammer cryptiles, PostCSS,Node.js,node-notifier,es5-ext ,MySQL Connectors,json-path and tough-cookier. Vulnerabilities include an attacker is able to brute force something that was supposed to be random, ...