CVE-2023-26136 (published 2023-07-01T05:00:01.115Z)
Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.
Affected products: Vendor: n/a
Product: tough-cookie
Versions: 0