GHSA-g7q5-pjjr-gqvp high
Regular Expression Denial of Service in tough-cookie
Affected range
SEMVER: introduced 0; fixed 2.3.3Fixed versions: 2.3.3
RFC6265 Cookies and Cookie Jar for node.js
Evidence path
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
Latest version
6.0.2
No matching published advisory returned
Known exploitation
No KEV match
Checked by exact CVE identifier
Highest advisory severity
High
3 active advisories
The registry confirms the version, then OSV checks advisories for that exact value.
Published records
Affected range
SEMVER: introduced 0; fixed 2.3.3Fixed versions: 2.3.3
Affected range
SEMVER: introduced 0; fixed 4.1.3Fixed versions: 4.1.3
Affected range
SEMVER: introduced 0; fixed 2.3.0Fixed versions: 2.3.0