CVE-2022-0355

Improper Removal of Sensitive Information Before Storage or Transfer in NPM simple-get prior to 4.0.1.

Score

CVSS 3.1 8.8 High

Status

Modified - security@huntr.dev

Published

2022-01-26

Last modified

2024-08-02

Weaknesses

CWE-212

Affected products

• Ferosssimple-get (Feross)
• Simple-get (Simple-get Project)

References

• https://github.com/advisories/GHSA-wpg7-2c88-r8xv
• https://github.com/feross/simple-get/commit/e4af095e06cd69a9235013e8507e220a79b9684f
• https://huntr.dev/bounties/42c79c23-6646-46c4-871d-219c0d4b4e31