Lucene search
+L

1 matches found

OSV
OSV
added 2023/12/22 11:6 a.m.5 views

OESA-2023-1952 nodejs-tough-cookie security update

. Security Fixes: Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.CVE-2023-26136...

9.8CVSS6.9AI score0.02542EPSS
SaveExploits2References2
Rows per page
Query Builder