GCVE-110-MAGEIA-2024-80

Advisory Published

Vulnetix · Advisory published March 22, 2024

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized. (CVE-2023-26136)

Download JSON Open in Console

Threat Intelligence

Snort Rules (1)

1783521: CVE-2023-26136 tough-cookie prototype pollution attempt via __proto__ cookie

Affected Products

Vendor	Product	Versions	Platforms
Mageia	nodejs-tough-cookie	0 (affected), 2.3.4-5.1.mga9 (unaffected)	—

References

Updated nodejs-tough-cookie packages fix security vulnerability

advisory

Updated nodejs-tough-cookie packages fix security vulnerability

issue

Updated nodejs-tough-cookie packages fix security vulnerability

url

Browse GCVE Records

1,417 records in the GCVE database · Updated October 24, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON