Vendor/product archive

salesforce / tough-cookie CVEs

Beta · best-effort

3 CVEs tagged to salesforce / tough-cookie — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to salesforce vendor archive

CVE-2023-26136

Published Jul 1, 2023

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2016-1000232

Published Sep 5, 2018

NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service. This attack appea…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2017-15010

Published Oct 4, 2017

A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a special…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1