Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/node-tough-cookie@4.1.3%2B~4.0.2-1?distro=trixie
purl pkg:deb/debian/node-tough-cookie@4.1.3%2B~4.0.2-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-wjaq-7np6-z3bk Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Versions of the package tough-cookie before 4.1.3 is vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized. CVE-2023-26136
GHSA-72xf-g2v4-qvf3

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T08:50:33.620596+00:00 Debian Importer Fixing VCID-wjaq-7np6-z3bk https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-11T17:56:26.413966+00:00 Debian Importer Fixing VCID-wjaq-7np6-z3bk https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:47:17.280919+00:00 Debian Importer Fixing VCID-wjaq-7np6-z3bk https://security-tracker.debian.org/tracker/data/json 38.1.0