Debian/node-tough-cookie: high 7.5
A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may
Action: Upgrade node-tough-cookie to 2.3.4+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.4+dfsg-1 | - |
Fixed versions
| 2.3.4+dfsg-1 |
Sources
- osv: DEBIAN-CVE-2017-15010#Debian:13/node-tough-cookie
- https://security-tracker.debian.org/tracker/CVE-2017-15010
published · modified · JSON