CVE-2023-26136

Summary

CVE-2023-26136: A vulnerability affectting tough-cookie packages prior to version 4.1.3 has been identified. This issue allows for Prototype Pollution due to improper handling of Cookies in CookieJar when rejectPublicSuffixes is set to false. The flaw emerges from the way objects are initialized, potentially enabling attackers to manipulate and inject malicious code. Users are encouraged to update their packages to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.