GHSA-pw2r-vq6v-hr8c
Exposure of Sensitive Information to an Unauthorized Actor in follow-redirects
At a glance
- Published
- Updated
- CVE
- CVE-2022-0536
- CVSS_V3
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
Exposure of Sensitive Information to an Unauthorized Actor in NPM follow-redirects prior to 1.14.8.
Affected packages
| Package | Versions |
|---|---|
| npm · follow-redirects | introduced 0, fixed 1.14.8 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2022-0536 ADVISORY
- https://github.com/follow-redirects/follow-redirects/commit/62e546a99c07c3ee5e4e0718c84a6ca127c5c445 WEB
- https://github.com/follow-redirects/follow-redirects PACKAGE
- https://huntr.dev/bounties/7cf2bf90-52da-4d59-8028-a73b132de0db WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |