Medium DLA-3488-1 1 CVE

node-tough-cookie - security update

Published Jul 10, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	node-tough-cookie	2.3.4+dfsg-1+deb10u1

Vulnerabilities 1

Medium 6.5

CVE-2023-26136 Public exploit

tough-cookie Prototype Pollution vulnerability

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.

katib-suggestion-hyperopt katib-earlystopping katib-suggestion-pbt-enas katib-suggestion-optuna-enas Debian Ubuntu Azure Linux Wolfi npm

Jul 1, 2023