{"action":"Upgrade node-fetch to 2.6.1 or later.","affected":[{"fixed":"2.6.1","introduced":"2.0.0"},{"fixed":"3.0.0-beta.9","introduced":"3.0.0-beta.1"}],"component":"node-fetch","cve_ids":["CVE-2020-15168"],"ecosystem":"npm","epss":0.01692,"exploited":false,"fixed_versions":["2.6.1","3.0.0-beta.9"],"ghsa_id":"GHSA-w7rc-rwvf-8q5r","id":"tcs_01M5KGEC5KA1YF49HGPC7TG5H1","modified_at":"2026-07-08T06:00:29.567074454Z","published_at":"2020-09-10T17:46:21Z","references":["https://osv.dev/vulnerability/GHSA-w7rc-rwvf-8q5r","https://github.com/node-fetch/node-fetch/security/advisories/GHSA-w7rc-rwvf-8q5r","https://nvd.nist.gov/vuln/detail/CVE-2020-15168","https://github.com/node-fetch/node-fetch/commit/2358a6c2563d1730a0cdaccc197c611949f6a334","https://github.com/node-fetch/node-fetch/commit/eaff0094c4dfdd5b78711a8c4f1b61e33d282072","https://github.com/node-fetch/node-fetch"],"severity":{"label":"low","score":2.6},"sources":[{"source":"osv","source_id":"GHSA-w7rc-rwvf-8q5r","url":"https://osv.dev/vulnerability/GHSA-w7rc-rwvf-8q5r"}],"summary":"The `size` option isn't honored after following a redirect in node-fetch"}