Open-Source-Seal-Security

PROJET SEAL SECURITY : Tâche d'ingénieur Open Source Créer une nouvelle version du package tough-cookie V2.5.0, pour corriger la vulnérabilité critique CVE-2023-26136, projet écrit en Node.js V20 Les versions du package tough-cookie antérieures à 4.1.3 sont vulnérables à la pollution de prototype...

tough-cookie-2.5.0-cve-2023-26136-fix

CVE-2023-26136 tough-cookie 2.5.0 수정 미션 개요 이 프로젝트는 tough-cookie 4.1.3 이전 버전에서 발생하는 심각한 프로토타입 오염Prototype Pollution 취약점인 CVE-2023-26136 을 해결합니다. 이 취약점은 쿠키 처리에 [email protected]을 사용하는 Penguin Software Inc.의 웹 애플리케이션에 영향을 미칩니다. 취약점 설명 CVE-2023-26136 은 CookieJar를 rejectPublicSuffixes=false와 함께 사...

CVE-2023-26136

Исследование уязвимости CVE-2023-26136 Описание Версии пакета tough-cookie до 4.1.3 уязвимы к Prototype Pollution из-за некорректной обработки cookie при использовании CookieJar в режиме rejectPublicSuffixes=false. Проблема возникает из-за способа инициализации объектов. Цель и исправление Этот...

Tough-Cookie-v2.5.0-Patched

Tough-Cookie v2.5.0 с патчем — исправление Prototype Pollution Обзор Этот репозиторий содержит пропатченную версию пакета tough-cookie версии 2.5.0, предназначенную для устранения критической уязвимости Prototype Pollution CVE-2023-26136. Уязвимость позволяет злоумышленникам манипулировать цепочк...

SealSecurityAssignment

SealSecurityAssignment Recherche sur la vulnérabilité CVE-2023-26136 Recherche sur la vulnérabilité : CVE-2023-26136 Description : Les versions du paquet tough-cookie antérieures à 4.1.3 sont vulnérables à la pollution de prototype Prototype Pollution en raison d'une gestion incorrecte des cookie...

K000162729: NPM tough-cookie vulnerability CVE-2023-26136

Security Advisory Description Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized. CVE-2023-26136...

Prototype Pollution

tough-cookie is vulnerable to Prototype Pollution. The vulnerability exists due to improper domain sanitization when using the CookieJar with rejectPublicSuffixes=false which allows an attacker to modify the base prototype, resulting in Prototype Pollution...

CVE-2023-26136

A flaw was found in the tough-cookie package which allows Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized...

tough-cookie Prototype Pollution vulnerability

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized...

CVE-2023-26136

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized...

AZL-43684 CVE-2023-26136 affecting package js-jquery 3.5.0-4

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized...

CVE-2023-26136

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized...

CVE-2023-26136

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized...

CVE-2023-26136

CVE-2023-26136 affects tough-cookie prior to 4.1.3. The issue is a Prototype Pollution vulnerability in CookieJar handling when rejectPublicSuffixes=false, arising from how objects are initialized. Impacted component: tough-cookie (node.js library). Reported root cause: improper object initializa...

CVE-2023-26136: Improperly Controlled Modification of Object Prototype Attributes

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized...