node-fetch

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

node-fetch records in CISA KEV

No node-fetch vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Node-fetch 3 records LOW

Records

3 records in Node-fetch · all components

TI-2022-02398 CVE-2022-2596 · GHSA-vp56-6g26-6827

Inefficient Regular Expression Complexity in node-fetch/node-fetch

LOW 35

Inefficient Regular Expression Complexity in GitHub repository node-fetch/node-fetch prior to 3.2.10.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01336 Published 2022-08-01 Fixed in 3.2.10 CWE-1333

TI-2022-00171 CVE-2022-0235 · GHSA-r683-j2x4-v87g

Exposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch

LOW 31

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01653 Published 2022-01-16 Partial fix · 3.1.1, 2.6.7 CWE-200

TI-2020-11940 CVE-2020-15168 · GHSA-w7rc-rwvf-8q5r

File size limit bypass in node-fetch

LOW 27

node-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process wou…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01692 Published 2020-09-10 Partial fix · 2.6.1, 3.0.0-beta.9 CWE-20

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0