Login Request a demo
TO
Product
Tough-cookie
by Salesforce · last CVE Jul 1, 2023
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 1High 1Medium 1Low 0
Severity
All severities3Critical1High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Tough-cookie to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-26136
9.8
3%
Jul 1
Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode
Affected: before 4.1.3
CVE-2017-15010
7.5
3%
Oct 4
A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js
Affected: through 2.3.2
CVE-2016-1000232
5.3
2%
Sep 5
NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service
Affected: 0.9.7 through 2.2.2
Showing 3