Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-1650

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-6h5x-7c5m-7cr7

Exposure of Sensitive Information in eventsource When fetching an url with a link to an external site (Redirect), the users Cookies & Autorisation headers are leaked to the third party application. According to the same-origin-policy, the header should be "sanitized."

gitlab/npm/eventsource/CVE-2022-1650

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository eventsource/eventsource prior to v2.0.2.