[Epel-packagers-sig] [Bug 2220677] New: CVE-2023-26136 yarnpkg: tough-cookie: prototype pollution in cookie memstore [epel-all]

https://bugzilla.redhat.com/show_bug.cgi?id=2220677

Bug ID: 2220677
           Summary: CVE-2023-26136 yarnpkg: tough-cookie: prototype
                    pollution in cookie memstore [epel-all]
           Product: Fedora EPEL
           Version: epel8
            Status: NEW
         Component: yarnpkg
          Keywords: Security, SecurityTracking
          Severity: medium
          Priority: medium
          Assignee: [e-mail]
          Reporter: [e-mail]
                CC: [e-mail],
                    [e-mail], [e-mail],
                    [e-mail]
  Target Milestone: ---
    Classification: Fedora

More information about this security flaw is available in the following bug:

http://bugzilla.redhat.com/show_bug.cgi?id=2219310

Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.