node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-develUpgrade nodejsUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-nodemon | Jan 12, 2023 | Jan 16, 2022 |
| Centos_linux | — | Upgrade nodejs-docsUpgrade nodejs-debuginfoUpgrade nodejs-packagingUpgrade nodejs-debugsourceUpgrade nodejs-nodemonUpgrade nodejs-full-i18nUpgrade nodejsUpgrade nodejs-develUpgrade npm | Jan 12, 2023 | Jan 16, 2022 |
| Debian | — | Upgrade node-fetch | Dec 6, 2022 | Jan 16, 2022 |
| Oracle_linux | — | Upgrade nodejs-packagingUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade npm | Jan 10, 2023 | Jan 14, 2022 |
| Redhat_linux | — | Upgrade nodejsUpgrade nodejs-develUpgrade nodejs-debugsourceUpgrade nodejs-docsUpgrade nodejs-nodemonNo solution existsUpgrade nodejs-debuginfoUpgrade nodejs-packagingUpgrade npmUpgrade nodejs-full-i18n | Jan 12, 2023 | Jan 16, 2022 |
| Rocky_linux | — | Upgrade nodejs-full-i18nUpgrade nodejs-debuginfoUpgrade nodejs-develUpgrade nodejs-debugsourceUpgrade npmUpgrade nodejs | Mar 12, 2024 | Jan 16, 2022 |
| Suse | — | Upgrade nodejs10Upgrade nodejs8Upgrade nodejs14-develUpgrade npm12Upgrade npm14Upgrade npm8Upgrade nodejs10-develUpgrade corepack14Upgrade nodejs10-docsUpgrade nodejs14-docsUpgrade nodejs8-develUpgrade nodejs14Upgrade npm10Upgrade nodejs12-docsUpgrade nodejs12Upgrade nodejs8-docsUpgrade nodejs12-devel | Oct 26, 2022 | Jan 16, 2022 |
| Ubuntu | — | Upgrade node-fetchUpgrade node-fetch (Ubuntu Pro) | Jun 14, 2023 | Jan 16, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub