You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Security scans are reporting critical vulnerability with the package tough-cookie@2.5.0 which is a dependency of request@2.88.2.
CVE CVE-2023-26136
SEVERITY critical
CVSS 9.80
PACKAGE tough-cookie
VERSION 2.5.0
STATUS fixed in 4.1.3
PUBLISHED > 7 months
DISCOVERED < 1 hour
DESCRIPTION Versions of the package tough-cookie
before 4.1.3 are vulnerable to Prototype
Pollution due to improper handling of
Cookies when using CookieJar in re...
TRIGGERED FAILURE Yes
Thanks.
The text was updated successfully, but these errors were encountered:
Security scans are reporting critical vulnerability with the package tough-cookie@2.5.0 which is a dependency of request@2.88.2.
Thanks.
The text was updated successfully, but these errors were encountered: