1 matches found
OESA-2023-1952 nodejs-tough-cookie security update
. Security Fixes: Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.CVE-2023-26136...
9.8CVSS6.9AI score0.02542EPSS
SaveExploits2References2
20