CVE-2022-1650

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.

Score

CVSS 3.1 9.3 Critical

Status

Modified - security@huntr.dev

Published

2022-05-12

Last modified

2024-08-03

Weaknesses

CWE-212

Affected products

• Debian Linux (Debian)
• Eventsource (Eventsource)
• Eventsourceeventsource (Eventsource)

References

• https://github.com/eventsource/eventsource/commit/10ee0c4881a6ba2fe65ec18ed195ac35889583c4
• https://huntr.dev/bounties/dc9e467f-be5d-4945-867d-1044d27e9b8e
• https://lists.debian.org/debian-lts-announce/2022/12/msg00021.html