Using the Vulnerable tough-cookie 4.0.4 as internal dependency.

[nileshp1993]

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using Cookie Jar in reject Public Suffixes=false mode.

• tough-cookie package used internally is outdated and poses a security risk.
• vulnerable tough-cookie version (4.0.4) and the recommended update (4.1.3).