Debian/node-fetch: medium 5.3
node-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown
Action: Upgrade node-fetch to 2.6.1-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.1-2 | - |
Fixed versions
| 2.6.1-2 |
Sources
- osv: DEBIAN-CVE-2020-15168#Debian:14/node-fetch
- https://security-tracker.debian.org/tracker/CVE-2020-15168
published · modified · JSON