node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade npmUpgrade nodejs-nodemonUpgrade nodejs-full-i18nUpgrade nodejs-develUpgrade nodejs-docsUpgrade nodejsUpgrade nodejs-packaging | Jan 12, 2023 | Jan 16, 2022 |
| Centos_linux | — | Upgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-develUpgrade npmUpgrade nodejs-packagingUpgrade nodejs-debugsourceUpgrade nodejs-nodemonUpgrade nodejs-debuginfoUpgrade nodejs-docs | Jan 12, 2023 | Jan 16, 2022 |
| Debian | — | Upgrade node-fetch | Dec 6, 2022 | Jan 16, 2022 |
| Oracle_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejsUpgrade npmUpgrade nodejs-develUpgrade nodejs-packaging | Jan 10, 2023 | Jan 14, 2022 |
| Redhat_linux | — | Upgrade nodejs-packagingNo solution existsUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-debuginfoUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade nodejs-debugsourceUpgrade nodejsUpgrade nodejs-docs | Jan 12, 2023 | Jan 16, 2022 |
| Rocky_linux | — | Upgrade nodejs-debugsourceUpgrade nodejs-full-i18nUpgrade nodejs-develUpgrade nodejs-debuginfoUpgrade nodejsUpgrade npm | Mar 12, 2024 | Jan 16, 2022 |
| Suse | — | Upgrade npm12Upgrade nodejs12Upgrade nodejs10Upgrade npm14Upgrade nodejs12-develUpgrade nodejs8Upgrade nodejs14-develUpgrade nodejs12-docsUpgrade nodejs14-docsUpgrade npm10Upgrade nodejs14Upgrade nodejs8-develUpgrade nodejs8-docsUpgrade nodejs10-docsUpgrade corepack14Upgrade nodejs10-develUpgrade npm8 | Oct 26, 2022 | Jan 16, 2022 |
| Ubuntu | — | Upgrade node-fetchUpgrade node-fetch (Ubuntu Pro) | Jun 14, 2023 | Jan 16, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub