CVE-2022-24719
1 advisory.
npm/fluture-node CVE-2022-24719: low 2.6
Forwarding of confidentials headers to third parties in fluture-node
Action: Upgrade fluture-node to 4.0.2 or later.
npm i fluture-node@4.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.0.2 | - |
Fixed versions
| 4.0.2 |
Sources
- osv: GHSA-32x6-qvw6-mxj4
- https://github.com/fluture-js/fluture-node/security/advisories/GHSA-32x6-qvw6-mxj4
- https://nvd.nist.gov/vuln/detail/CVE-2022-24719
- https://github.com/psf/requests/pull/4718
- https://github.com/fluture-js/fluture-node/commit/0c99bc511533d48be17dc6bfe641f7d0aeb34d77
- https://github.com/fluture-js/fluture-node/commit/125e4474f910c1507f8ec3232848626fbc0f55c4
- https://github.com/fluture-js/fluture-node
- https://github.com/pypa/advisory-database/tree/main/vulns/pyquest/PYSEC-2022-43051.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/request-util/PYSEC-2022-43052.yaml
CVE-2022-24719 · published · modified · JSON