Lucene search
+L

14 matches found

Kitploit
Kitploit
added 2026/08/26 7:35 a.m.1 views

CVE-2023-26136

Ricerca sulla vulnerabilità CVE-2023-26136 Descrizione Le versioni del pacchetto tough-cookie precedenti alla 4.1.3 sono vulnerabili a Prototype Pollution a causa di una gestione impropria dei cookie quando si utilizza CookieJar in modalità rejectPublicSuffixes=false. Questo problema deriva dal...

9.8CVSS6.2AI score0.02542EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.3 views

SealSecurityAssignment

SealSecurityAssignment Ricerca sulla vulnerabilità CVE-2023-26136 Ricerca sulla Vulnerabilità: CVE-2023-26136 Descrizione: Le versioni del pacchetto tough-cookie precedenti alla 4.1.3 sono vulnerabili a Prototype Pollution a causa di una gestione impropria dei cookie quando si utilizza CookieJar ...

9.8CVSS6.2AI score0.02542EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.2 views

Tough-Cookie-v2.5.0-Patched

Tough-Cookie v2.5.0 Corrigido - Correção de Poluição de Protótipo Visão Geral Este repositório contém uma versão corrigida do pacote tough-cookie, versão 2.5.0, para resolver a vulnerabilidade crítica de Poluição de Protótipo CVE-2023-26136. A vulnerabilidade permite que atacantes manipulem a...

9.8CVSS6.2AI score0.02542EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/26 1:23 a.m.1 views

tough-cookie-2.5.0-cve-2023-26136-fix

Correzione di CVE-2023-26136 per tough-cookie 2.5.0 Panoramica della Missione Questo progetto affronta CVE-2023-26136 , una vulnerabilità critica di prototype pollution in tough-cookie precedente alla versione 4.1.3. La vulnerabilità colpisce l'applicazione web di Penguin Software Inc., che...

9.8CVSS6.2AI score0.02542EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 9:38 p.m.1 views

Open-Source-Seal-Security

SEAL SECURITY PROJECT : Compito Ingegnere Open Source Crea una nuova versione del pacchetto tough-cookie V2.5.0 ,per correggere la vulnerabilità critica CVE-2023-26136, progetto scritto in Node.js V20 Le versioni del pacchetto tough-cookie precedenti alla 4.1.3 sono vulnerabili a Prototype...

9.8CVSS6.2AI score0.02542EPSS
SaveExploits2
F5 Networks
F5 Networks
added 2026/08/03 3:48 p.m.21 views

K000162729: NPM tough-cookie vulnerability CVE-2023-26136

Security Advisory Description Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized. CVE-2023-26136...

9.8CVSS6.5AI score0.02542EPSS
SaveExploits2
Veracode
Veracode
added 2023/07/11 7:35 a.m.52 views

Prototype Pollution

tough-cookie is vulnerable to Prototype Pollution. The vulnerability exists due to improper domain sanitization when using the CookieJar with rejectPublicSuffixes=false which allows an attacker to modify the base prototype, resulting in Prototype Pollution...

9.8CVSS7AI score0.02542EPSS
SaveExploits2References7Affected Software2
RedhatCVE
RedhatCVE
added 2023/07/06 5:57 a.m.123 views

CVE-2023-26136

A flaw was found in the tough-cookie package which allows Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized...

6.5CVSS8.8AI score0.02542EPSS
SaveExploits2References8
Github Security Blog
Github Security Blog
added 2023/07/01 6:30 a.m.548 views

tough-cookie Prototype Pollution vulnerability

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized...

9.8CVSS6.8AI score0.02542EPSS
SaveExploits2References10Affected Software1
NVD
NVD
added 2023/07/01 5:15 a.m.31 views

CVE-2023-26136

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized...

9.8CVSS7.9AI score0.02542EPSS
SaveExploits2References8
OSV
OSV
added 2023/07/01 5:15 a.m.12 views

AZL-43684 CVE-2023-26136 affecting package js-jquery 3.5.0-4

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized...

9.8CVSS6.7AI score0.02542EPSS
SaveExploits2References1
UbuntuCve
UbuntuCve
added 2023/07/01 5:15 a.m.419 views

CVE-2023-26136

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized...

9.8CVSS6.8AI score0.02542EPSS
SaveExploits2References3
CVE
CVE
added 2023/07/01 5:00 a.m.512 views

CVE-2023-26136

CVE-2023-26136 affects tough-cookie prior to 4.1.3. The issue is a Prototype Pollution vulnerability in CookieJar handling when rejectPublicSuffixes=false, arising from how objects are initialized. Impacted component: tough-cookie (node.js library). Reported root cause: improper object initializa...

9.8CVSS9.2AI score0.02542EPSS
SaveExploits2References8Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/01 5:00 a.m.15 views

CVE-2023-26136

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized...

6.5CVSS6.7AI score0.02542EPSS
SaveExploits2References8
Rows per page
Query Builder