111 matches found
CVE-2023-26136
CVE-2023-26136 취약점 연구 설명 tough-cookie 패키지 4.1.3 이전 버전은 rejectPublicSuffixes=false 모드에서 CookieJar를 사용할 때 쿠키를 부적절하게 처리하여 프로토타입 오염Prototype Pollution에 취약합니다. 이 문제는 객체가 초기화되는 방식에서 발생합니다. 목표 및 수정 사항 이 프로젝트는 CVE-2023-26136 취약점을 제거하면서 이전 버전과의 호환성을 보장하는 패치된 버전의 [email protected]을 제공하는 것을 목표로 합니다. 취약...
tough-cookie-patch-cve-2023-26136
RFC6265 Куки и CookieJar для Node.js Краткий обзор javascript var tough = require'tough-cookie'; var Cookie = tough.Cookie; var cookie = Cookie.parseheader; cookie.value = 'somethingdifferent'; header = cookie.toString; var cookiejar = new tough.CookieJar; cookiejar.setCookiecookie,...
SealSecurityAssignment
SealSecurityAssignment Исследование уязвимости CVE-2023-26136 Исследование уязвимости: CVE-2023-26136 Описание: Версии пакета tough-cookie до 4.1.3 уязвимы к Prototype Pollution из-за неправильной обработки Cookies при использовании CookieJar в режиме rejectPublicSuffixes=false. Эта проблема...
Tough-Cookie-v2.5.0-Patched
Tough-Cookie v2.5.0 Patchato - Correzione Prototype Pollution Panoramica Questo repository contiene una versione patchata del pacchetto tough-cookie, versione 2.5.0, per risolvere la critica vulnerabilità Prototype Pollution CVE-2023-26136. La vulnerabilità consente agli attaccanti di manipolare ...
tough-cookie-2.5.0-cve-2023-26136-fix
Correzione di CVE-2023-26136 per tough-cookie 2.5.0 Panoramica della Missione Questo progetto affronta CVE-2023-26136 , una vulnerabilità critica di prototype pollution in tough-cookie precedente alla versione 4.1.3. La vulnerabilità colpisce l'applicazione web di Penguin Software Inc., che...
Open-Source-Seal-Security
SEAL SECURITY PROJECT : Compito Ingegnere Open Source Crea una nuova versione del pacchetto tough-cookie V2.5.0 ,per correggere la vulnerabilità critica CVE-2023-26136, progetto scritto in Node.js V20 Le versioni del pacchetto tough-cookie precedenti alla 4.1.3 sono vulnerabili a Prototype...
CLSA-2026-1784596295 TuxCare security update for tough-cookie (2 CVEs)
TuxCare rebuilt tough-cookie to address 2 CVEs. Fixed in 2.2.2-tuxcare.2...
CLSA-2026-1776818217 TuxCare security update for tough-cookie (1 CVE)
TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 2.3.4-tuxcare.1...
CLSA-2026-1774225211 TuxCare security update for tough-cookie (5 CVEs)
TuxCare rebuilt tough-cookie to address 5 CVEs. Fixed in 1.2.0-tuxcare.1...
CLSA-2026-1773274554 TuxCare security update for tough-cookie (4 CVEs)
TuxCare rebuilt tough-cookie to address 4 CVEs. Fixed in 3.0.1-tuxcare.1...
CLSA-2026-1773274553 TuxCare security update for tough-cookie (11 CVEs)
TuxCare rebuilt tough-cookie to address 11 CVEs. Fixed in 2.4.3-tuxcare.1...
CLSA-2026-1773101696 TuxCare security update for tough-cookie (6 CVEs)
TuxCare rebuilt tough-cookie to address 6 CVEs. Fixed in 2.2.0-tuxcare.1...
CLSA-2026-1772583199 TuxCare security update for tough-cookie (3 CVEs)
TuxCare rebuilt tough-cookie to address 3 CVEs. Fixed in 0.12.1-tuxcare.1...
K000162729: NPM tough-cookie vulnerability CVE-2023-26136
Security Advisory Description Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized. CVE-2023-26136...
ROOT-APP-NPM-CVE-2023-26136 CVE-2023-26136 in @rootio/tough-cookie - Patched by Root
Root has patched CVE-2023-26136 in the @rootio/tough-cookie package for Root:npm. Multiple fixed versions available...
Astra Linux – Vulnerability in node-tough-cookie
Versions of the tough-cookie package before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in the rejectPublicSuffixes=false mode. This issue arises from the way in which the objects are initialized...
Security Bulletin: tough-cookie Prototype Pollution Vulnerability in CookieJar, affects watsonx.data
Summary ough-cookie versions prior to 4.1.3 are vulnerable to prototype pollution when using CookieJar with rejectPublicSuffixes=false due to improper object initialization. Fixed in version 4.1.3. This can affect watsonx.data. Vulnerability Details CVEID:CVE-2023-26136 DESCRIPTION: Versions of t...
Security Bulletin: Vulnerabilities in Eran Hammer cryptiles, PostCSS,Node.js,node-notifier,es5-ext ,MySQL Connectors,json-path and tough-cookie might affect IBM Storage Defender Copy Data Management
Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Eran Hammer cryptiles, PostCSS,Node.js,node-notifier,es5-ext ,MySQL Connectors,json-path and tough-cookier. Vulnerabilities include an attacker is able to brute force something that was supposed to be random, ...
