Salesforce ≫ Tough-cookie

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

9.8

CVE-2023-26136

Exploit

EPSS 6.87%
Published 01.07.2023 05:15:16
Last modified 21.11.2024 07:50:51

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialize...

5.3

CVE-2016-1000232

EPSS 0.92%
Published 05.09.2018 17:29:00
Last modified 21.11.2024 02:43:01

NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service. This attack appear to be exploitable via Custom HTTP header passed by client. This vulne...

7.5

CVE-2017-15010

EPSS 8.7%
Published 04.10.2017 01:29:03
Last modified 20.04.2025 01:37:25

A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amo...