CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2022-0654
High (7.5) in node-request-retry project node-request-retry. EPSS 1.4% chance of exploitation in the next 30 days. Fixed in requestretry 7.0.0.
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository fgribreau/node-request-retry prior to 7.0.0.
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- node-request-retry_project:node-request-retry
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-hjp8-2cm3-cc45 | npm | requestretry | <7.0.0 | 7.0.0 |
References
- https://github.com/fgribreau/node-request-retry/commit/0979c6001d9d57c2aac3157c11b007397158922a
- https://huntr.dev/bounties/a779faf5-c2cc-48be-a31d-4ddfac357afc
- https://github.com/fgribreau/node-request-retry/commit/0979c6001d9d57c2aac3157c11b007397158922a
- https://huntr.dev/bounties/a779faf5-c2cc-48be-a31d-4ddfac357afc