~ / search / GHSA-hjp8-2cm3-cc45

GHSA-hjp8-2cm3-cc45

Cookie exposure in requestretry

Source: GitHub Advisory Database (reviewed) High CVE-2022-0654

Packages

EcosystemPackageAffectedFixed in
npm requestretry < 7.0.0 7.0.0

Details

As written in the advisory (Markdown source, shown as plain text).

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository fgribreau/node-request-retry prior to 7.0.0 via cookies being leaked to external sites.

References

External links from the advisory. They lead to third-party sites.