github_osv/GHSA-wpg7-2c88-r8xv
Exposure of Sensitive Information in simple-get
In versions of simple-get prior to 4.0.1, 3.1.1, and 2.8.2, when fetching a remote url with a cookie location response, headers will be followed, potentially resulting in an exposure of the session cookie to a third party.
gitlab/npm/simple-get/CVE-2022-0355
Exposure of Sensitive Information to an Unauthorized Actor in NPM simple-get.