CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2022-0355
Improper Removal of Sensitive Information Before Storage or Transfer in NPM simple-get prior to 4.0.1.
Severity
- EPSS
- 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
- CWE
- CWE-212
- Published
- Modified
- Record from
- the NVD, synced
Affected
- simple-get_project:simple-get
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-wpg7-2c88-r8xv | npm | simple-get | >=4.0.0 <4.0.1 | 4.0.1 |
| GHSA-wpg7-2c88-r8xv | npm | simple-get | >=3.0.0 <3.1.1 | 3.1.1 |
| GHSA-wpg7-2c88-r8xv | npm | simple-get | <2.8.2 | 2.8.2 |
References
- https://github.com/advisories/GHSA-wpg7-2c88-r8xv
- https://github.com/feross/simple-get/commit/e4af095e06cd69a9235013e8507e220a79b9684f
- https://huntr.dev/bounties/42c79c23-6646-46c4-871d-219c0d4b4e31
- https://github.com/advisories/GHSA-wpg7-2c88-r8xv
- https://github.com/feross/simple-get/commit/e4af095e06cd69a9235013e8507e220a79b9684f