CVE-2022-1650

8.1

HIGHCVSS v3

Published

May 12, 2022

CVSS v2

5.8 MEDIUM

Affected

6 projects

Assigned by

Severity scale

010

Description

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.

NPMWhatWG/W3C compliant EventSource client for Node.js and browsers

< 1.1.1, >= 2.0.0, < 2.0.2NVD

NPMW3C compliant EventSource client for Node.js and browser (polyfill)

< 1.1.1, >= 2.0.0, < 2.0.2NVD

NPM

Stub TypeScript definitions entry for eventsource, which provides its own types definitions

< 1.1.1, >= 2.0.0, < 2.0.2NVD

GitHuba polyfill for http://www.w3.org/TR/eventsource/

< 1.1.1, >= 2.0.0, < 2.0.2NVD

GitHubProvide polyfill to support EventSource in browser where it is not available

< 1.1.1, >= 2.0.0, < 2.0.2NVD

GitHubEventSource client for Node.js, browsers and other JavaScript runtimes

< 1.1.1, >= 2.0.0, < 2.0.2NVD