@isomorphic-git/cors-proxy

@isomorphic-git/cors-proxy

NPMNPM
NPMwww.npmjs.com
GitHubgithub.com
Releases15
Frequency6 months 3 weeks
Last Release
Proxy clone and push requests for the browser
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2021-23664NVD↗
< 2.7.18.6 HIGH5 MEDIUM

The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery (SSRF) due to missing sanitization and validation of the redirection action in middleware.js.