guy2610/tough-cookie-patch-cve-2023-26136

PoC

view exploit source poc_in_githubauthor guy2610published 2025-07-28catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-26136US	critical9.8	2.63% (85th)	Exploit	2023-07-01
Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode.…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.