277 matches found
SealSecurityAssignment
SealSecurityAssignment Researching on the vulnrability CVE-2023-26136 Research on Vulnerability: CVE-2023-26136 Description: Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=fal...
CVE-2023-26136
Research on the vulnerability CVE-2023-26136 Description Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which objects are...
AWS-Tough-Library-Multiple-CVEs
AWS Tough Library Multiple CVEs In March 2025, multiple security vulnerabilities were disclosed in AWS Labs’ Tough library a Rust client implementation of TUF – The Update Framework. These issues are tracked under CVE-2025-2885, CVE-2025-2886, CVE-2025-2887 and CVE-2025-2888, and were fixed in...
Open-Source-Seal-Security
SEAL SECURITY PROJECT : Open Source Engineer Task Create new version of package tough-cookie V2.5.0 ,for fix critical vulnerability CVE-2023-26136, project written in Node.js V20 Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of...
Tough-Cookie-v2.5.0-Patched
Tough-Cookie v2.5.0 Patched - Prototype Pollution Fix Overview This repository contains a patched version of the tough-cookie package, version 2.5.0, to address the critical Prototype Pollution vulnerability CVE-2023-26136. The vulnerability allows attackers to manipulate the prototype chain by...
SealSecurity_Exam
SealSecurityExam Prototype pollution is a JavaScript vulnerability that enables an attacker to add arbitrary properties to global object prototypes, which may then be inherited by user-defined objects. A prototype pollution source is any user-controllable input that enables you to add arbitrary...
tough-cookie-patch-cve-2023-26136
RFC6265 Cookies and CookieJar for Node.js Synopsis var tough = require'tough-cookie'; var Cookie = tough.Cookie; var cookie = Cookie.parseheader; cookie.value = 'somethingdifferent'; header = cookie.toString; var cookiejar = new tough.CookieJar; cookiejar.setCookiecookie,...
tough-cookie-2.5.0-cve-2023-26136-fix
CVE-2023-26136 Fix for tough-cookie 2.5.0 Mission Overview This project addresses CVE-2023-26136 , a critical prototype pollution vulnerability in tough-cookie versions before 4.1.3. The vulnerability affects Penguin Software Inc.'s web application, which uses [email protected] for cookie...
CLSA-2026-1792791719 TuxCare security update for tough-cookie (1 CVE)
TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 2.3.2-tuxcare.2...
PT-2026-135848
TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 2.3.2-tuxcare.2...
CLSA-2026-1792164172 TuxCare security update for tough-cookie (1 CVE)
TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 2.3.2-tuxcare.1...
CLSA-2026-1792164090 TuxCare security update for tough-cookie (3 CVEs)
TuxCare rebuilt tough-cookie to address 3 CVEs. Fixed in 2.2.1-tuxcare.1...
PT-2026-125006
TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 2.3.2-tuxcare.1...
PT-2026-125003
TuxCare rebuilt tough-cookie to address 3 CVEs. Fixed in 2.2.1-tuxcare.1...
Astra Linux – vulnerability in node-tough-cookie
Versions of the tough-cookie package prior to 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue stems from how the objects are initialized...
ROOT-APP-NPM-CVE-2023-26136 CVE-2023-26136 in tough-cookie - Patched by Root
Root has patched CVE-2023-26136 in the tough-cookie package for Root:npm. Multiple fixed versions available...
CLSA-2026-1784596273 TuxCare security update for tough-cookie (2 CVEs)
TuxCare rebuilt tough-cookie to address 2 CVEs. Fixed in 2.2.2-tuxcare.1...
CLSA-2026-1784596295 TuxCare security update for tough-cookie (1 CVE)
TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 2.2.2-tuxcare.2...