Tough-Cookie-v2.5.0-Patched

Tough-Cookie v2.5.0 패치 - 프로토타입 오염 수정 개요 이 저장소는 tough-cookie 패키지 v2.5.0의 패치 버전으로, 심각한 프로토타입 오염Prototype Pollution 취약점CVE-2023-26136을 해결합니다. 이 취약점은 공격자가 JavaScript 객체에 속성을 주입하여 프로토타입 체인을 조작할 수 있게 합니다. 이로 인해 예상치 못한 동작, 원격 코드 실행과 같은 보안 위험, 이 패키지에 의존하는 애플리케이션에서의 호환성 문제가 발생할 수 있습니다. 취약점 설명 tough-cookie...

tough-cookie-2.5.0-cve-2023-26136-fix

Исправление CVE-2023-26136 для tough-cookie 2.5.0 Обзор миссии Этот проект устраняет CVE-2023-26136 — критическую уязвимость прототипного загрязнения в версиях tough-cookie до 4.1.3. Уязвимость затрагивает веб-приложение компании Penguin Software Inc., которое использует [email protected] дл...

Open-Source-Seal-Security

SEAL SECURITY PROJECT : 오픈소스 엔지니어 태스크 tough-cookie V2.5.0 패키지의 새 버전을 생성하여 치명적인 취약점 CVE-2023-26136을 수정합니다. 이 프로젝트는 Node.js V20으로 작성되었습니다. tough-cookie 패키지 4.1.3 이전 버전은 rejectPublicSuffixes=false 모드에서 CookieJar를 사용할 때 쿠키를 잘못 처리하여 Prototype Pollution에 취약합니다. 이 문제는 객체가 초기화되는 방식 때문에 발생합니다...

CVE-2023-26136

CVE-2023-26136 脆弱性に関する調査 説明 tough-cookie パッケージのバージョン 4.1.3 より前のバージョンは、rejectPublicSuffixes=false モードで CookieJar を使用する際の Cookie の不適切な処理により、プロトタイプ汚染に対して脆弱です。この問題は、オブジェクトの初期化方法に起因します。 目的と修正 このプロジェクトは、[email protected] のパッチ適用版を提供し、CVE-2023-26136 の脆弱性を排除しつつ、後方互換性を確保することを目的としています。...

SealSecurityAssignment

SealSecurityAssignment Исследование уязвимости CVE-2023-26136 Исследование уязвимости: CVE-2023-26136 Описание: Версии пакета tough-cookie до 4.1.3 уязвимы к Prototype Pollution из-за неправильной обработки Cookies при использовании CookieJar в режиме rejectPublicSuffixes=false. Эта проблема...

K000162729: NPM tough-cookie vulnerability CVE-2023-26136

Security Advisory Description Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized. CVE-2023-26136...

Prototype Pollution

tough-cookie is vulnerable to Prototype Pollution. The vulnerability exists due to improper domain sanitization when using the CookieJar with rejectPublicSuffixes=false which allows an attacker to modify the base prototype, resulting in Prototype Pollution...

CVE-2023-26136

A flaw was found in the tough-cookie package which allows Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized...

tough-cookie Prototype Pollution vulnerability

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized...

CVE-2023-26136

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized...

AZL-43684 CVE-2023-26136 affecting package js-jquery 3.5.0-4

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized...

CVE-2023-26136

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized...

CVE-2023-26136

CVE-2023-26136 affects tough-cookie prior to 4.1.3. The issue is a Prototype Pollution vulnerability in CookieJar handling when rejectPublicSuffixes=false, arising from how objects are initialized. Impacted component: tough-cookie (node.js library). Reported root cause: improper object initializa...

CVE-2023-26136

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized...