Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2023-26136

tough-cookie: prototype pollution in cookie memstore

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.

CVSS 3.1 · 6.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Redhat Salesforce
Products
Acm Jboss Enterprise Application Platform Logging and 5 more
CVE-2017-15010

nodejs-tough-cookie: Regular expression denial of service

A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU.

CVSS 3.0 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Redhat Salesforce
Products
Mobile Application Platform Rhel Software Collections Tough-cookie
CVE-2016-1000232

nodejs-tough-cookie: regular expression DoS via Cookie header with many semicolons

NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service. This attack appear to be exploitable via Custom HTTP header passed by client. This vulnerability appears to have been fixed in 2.3.0.

CVSS 3.0 · 5.3 Medium EPSS 2.4% KEV · Not listed
Vendors
Ibm Redhat Salesforce
Products
Api Connect Openshift Openshift Container Platform and 2 more