TI-2017-11751 CVE-2017-16026 · GHSA-7xfp-9c55-5vqj
Improper input validation in HackerOne request node module
Priority LOW 31
Request is an http client.
Request Project
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Request Project records in CISA KEVNo Request Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Request · all components
TI-2023-12726 CVE-2023-28155 · GHSA-p8p7-x288-28g6
The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an…
Priority LOW 28
The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP).