Vulnerabilities (CVE)

Filtered by vendor Salesforce Subscribe
Filtered by product Tough-cookie
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-15010 1 Salesforce 1 Tough-cookie 2019-06-12 5.0 MEDIUM 7.5 HIGH
A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU.