{"action":"Upgrade got to 11.8.5 or later.","affected":[{"fixed":"12.1.0","introduced":"12.0.0"},{"fixed":"11.8.5","introduced":"0"}],"component":"got","cve_ids":["CVE-2022-33987"],"ecosystem":"npm","epss":0.02416,"exploited":false,"fixed_versions":["12.1.0","11.8.5"],"ghsa_id":"GHSA-pfrx-2q88-qq97","id":"tcs_01M5KG3H1ATFHWTAA9SBR3VAZ9","modified_at":"2026-09-10T03:49:55.225771209Z","published_at":"2022-06-19T00:00:21Z","references":["https://osv.dev/vulnerability/GHSA-pfrx-2q88-qq97","https://nvd.nist.gov/vuln/detail/CVE-2022-33987","https://github.com/sindresorhus/got/pull/2047","https://github.com/sindresorhus/got/commit/861ccd9ac2237df762a9e2beed7edd88c60782dc","https://github.com/sindresorhus/got","https://github.com/sindresorhus/got/compare/v12.0.3...v12.1.0","https://github.com/sindresorhus/got/releases/tag/v11.8.5","https://github.com/sindresorhus/got/releases/tag/v12.1.0"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-pfrx-2q88-qq97","url":"https://osv.dev/vulnerability/GHSA-pfrx-2q88-qq97"}],"summary":"Got allows a redirect to a UNIX socket"}