Tough Cookie
Approved changes feed: RSS · Atom
cpe:2.3:a:salesforce:tough-cookie:*:*:*:*:*:node.js:*:*
part: a version: * update: *
| Vendor | Salesforce (cfdafdea-90cf-5590-ad24-239f205b7d02) |
|---|---|
| Product | Tough Cookie (ce8ef032-440a-550a-ae15-3e24c8c90907) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | node.js |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-26136 |
vulnerable | 2026-06-03 14:50:58.398112 |
Details available
MEDIUM (6.5)
Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.
Published: 2023-07-01T05:00:01.115Z
Updated: 2025-08-27T20:32:53.151Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15010 |
vulnerable | 2026-06-03 14:36:45.134301 |
Details available
A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU.
Published: 2017-10-03T16:00:00.000Z
Updated: 2024-08-05T19:42:22.357Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1000232 |
vulnerable | 2026-06-03 14:35:22.998461 |
Details available
NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service. This attack appear to be exploitable via Custom HTTP header passed by client. This vulnerability appears to have been fixed in 2.3.0.
Published: 2018-09-05T17:00:00.000Z
Updated: 2024-08-06T03:55:27.288Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.