isomorphic-git

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

isomorphic-git records in CISA KEV

No isomorphic-git vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cors-proxy 1 record MEDIUM Isomorphic-git 1 record LOW

Records

1 record in Cors-proxy · all components

TI-2021-06178 CVE-2021-23664 · GHSA-v82v-rq72-phq9

Server-side request forgery (SSRF) in @isomorphic-git/cors-proxy

MEDIUM 40

The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery (SSRF) due to missing sanitization and validation of the redirection action in middleware.js.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01389 Published 2022-01-21 Fixed in 2.7.1 CWE-918

Open these records in search →

Critical	0
High	3
Medium	4
Low	0
No CVSS	0