CVE-2022-0654: Exposure of Sensitive Information

February 23, 2022 (updated March 2, 2022)

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository fgribreau/node-request-retry prior to 7.0.0.

References

github.com/fgribreau/node-request-retry/commit/0979c6001d9d57c2aac3157c11b007397158922a
huntr.dev/bounties/a779faf5-c2cc-48be-a31d-4ddfac357afc
nvd.nist.gov/vuln/detail/CVE-2022-0654

Code Behaviors & Features

Detect and mitigate CVE-2022-0654 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →