Lucene search
PRIOn knowledge basePRION:CVE-2023-26136HistoryJul 01, 2023 - 5:15 a.m.
Code injection
2023-07-0105:15:00
PRIOn knowledge base
www.prio-n.com
10
package vulnerability
cookiejar handling
prototype pollution
initialization issue
nvd
Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tough-cookie | lt | 4.1.3 |
References
github.com/salesforce/tough-cookie/commit/12d474791bb856004e858fdb1c47b7608d09cf6e
github.com/salesforce/tough-cookie/issues/282
github.com/salesforce/tough-cookie/releases/tag/v4.1.3
lists.debian.org/debian-lts-announce/2023/07/msg00010.html
lists.fedoraproject.org/archives/list/[email protected]/message/3HUE6ZR5SL73KHL7XUPAOEL6SB7HUDT2/
lists.fedoraproject.org/archives/list/[email protected]/message/6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ/
security.snyk.io/vuln/SNYK-JS-TOUGHCOOKIE-5672873
Related
redhatcve
redhatcve
CVE-2023-26136
2023-07-06 05:57:18
github
github
tough-cookie Prototype Pollution vulnerability
2023-07-01 06:30:16
ubuntucve
ubuntucve
CVE-2023-26136
2023-07-01 00:00:00
veracode
veracode
Prototype Pollution
2023-07-11 07:35:18
ibm
ibm
osv
osv
tough-cookie Prototype Pollution vulnerability
2023-07-01 06:30:16
CVE-2023-26136
2023-07-01 05:15:16
node-tough-cookie - security update
2023-07-10 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0080)
2024-04-05 00:00:00
Debian: Security Advisory (DLA-3488-1)
2023-07-11 00:00:00
Fedora: Security Advisory for yarnpkg (FEDORA-2024-28fc0c2ef4)
2024-02-28 00:00:00
mageia
mageia
Updated nodejs-tough-cookie packages fix security vulnerability
2024-03-22 03:19:51
debiancve
debiancve
CVE-2023-26136
2023-07-01 05:15:16
cvelist
cvelist
CVE-2023-26136
2023-07-01 05:00:01
nvd
nvd
CVE-2023-26136
2023-07-01 05:15:16
cve
cve
CVE-2023-26136
2023-07-01 05:15:16
nessus
nessus
RHEL 8 : tough-cookie (Unpatched Vulnerability)
2024-06-03 00:00:00
Debian DLA-3488-1 : node-tough-cookie - LTS security update
2023-07-11 00:00:00
Fedora 39 : yarnpkg (2024-28fc0c2ef4)
2024-02-28 00:00:00
debian
debian
[SECURITY] [DLA 3488-1] node-tough-cookie security update
2023-07-10 20:35:36
cgr
cgr
CVE-2023-26136 vulnerabilities
2024-05-19 03:07:16
fedora
fedora
[SECURITY] Fedora 39 Update: yarnpkg-1.22.21-2.fc39
2024-02-28 01:10:55
[SECURITY] Fedora 38 Update: yarnpkg-1.22.21-2.fc38
2024-02-28 01:41:33
redhat
redhat
redos
redos
ROS-20240704-07
2024-07-04 00:00:00