CVE-2023-26136 reported for dependency module tough-cookie

Hi,

We are using request module v2.88.2, which has dependency to tough-cookie v2.5.0, and this version is detects CVE-2023-26136 in vulnerability scan results.

CVE-2023-26136 - "Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized."

Please could you help if tough-cookie version can be upgraded to more stable version?

Thanks in advance