tough-cookie 安全漏洞

tough-cookie is an open source library from Salesforce. A security vulnerability exists in tough-cookie versions prior to 4.1.3 that stems from improper handling of cookies when using CookieJar in rejectPublicSuffixes=false mode, which could lead to a prototype contamination vulnerability...