Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-0235

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-r683-j2x4-v87g

node-fetch forwards secure headers to untrusted sites node-fetch forwards secure headers such as `authorization`, `www-authenticate`, `cookie`, & `cookie2` when redirecting to a untrusted site.

gitlab/npm/node-fetch/CVE-2022-0235

URL Redirection to Untrusted Site ('Open Redirect') node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor