node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade npmUpgrade nodejs-nodemonUpgrade nodejs-full-i18nUpgrade nodejs-develUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs | Jan 12, 2023 | Jan 16, 2022 |
| Centos_linux | — | Upgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejs-packaging | Jan 12, 2023 | Jan 16, 2022 |
| Debian | — | Upgrade node-fetch | Dec 6, 2022 | Jan 16, 2022 |
| Oracle_linux | — | Upgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade nodejsUpgrade npmUpgrade nodejs-docsUpgrade nodejs-full-i18n | Jan 10, 2023 | Jan 14, 2022 |
| Redhat_linux | — | No solution existsUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-develUpgrade nodejs-debugsourceUpgrade nodejs-docs | Jan 12, 2023 | Jan 16, 2022 |
| Rocky_linux | — | Upgrade nodejs-debugsourceUpgrade nodejs-full-i18nUpgrade nodejs-debuginfoUpgrade nodejs-develUpgrade npmUpgrade nodejs | Mar 12, 2024 | Jan 16, 2022 |
| Suse | — | Upgrade nodejs10-docsUpgrade npm8Upgrade npm10Upgrade nodejs14-docsUpgrade nodejs8-develUpgrade nodejs14Upgrade corepack14Upgrade nodejs10-develUpgrade npm12Upgrade nodejs12-develUpgrade npm14Upgrade nodejs8-docsUpgrade nodejs10Upgrade nodejs12-docsUpgrade nodejs8Upgrade nodejs14-develUpgrade nodejs12 | Oct 26, 2022 | Jan 16, 2022 |
| Ubuntu | — | Upgrade node-fetch (Ubuntu Pro)Upgrade node-fetch | Jun 14, 2023 | Jan 16, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub