Moole Vulnerability Database

Find real vulnerabilities before they ship

Critical

CVE-2022-1650

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.

VectorNETWORK

PublishedMay 12, 2022, 11:15

Published Bysecurity@huntr.dev

Base Score

Score9.3

Package (Ecosystem)IntroducedFixedLimit

eventsource(npm)01.1.1N/A

eventsource(npm)2.0.02.0.2N/A

CWE-212

Base Score

9.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Base SeverityCritical

Version

3.1

Attack Vector (AV)

NETWORK