Closed mend-bolt-for-github[bot] closed 2 years ago
:information_source: This issue was automatically closed by WhiteSource because it is a duplicate of an existing issue: #645
:information_source: This issue was automatically closed by WhiteSource because it is a duplicate of an existing issue: #645
CVE-2022-0355 - High Severity Vulnerability
Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines.
Library home page: https://registry.npmjs.org/simple-get/-/simple-get-3.1.0.tgz
Dependency Hierarchy: - grunt-contrib-compress-1.6.0.tgz (Root Library) - iltorb-2.4.4.tgz - prebuild-install-5.3.3.tgz - :x: **simple-get-3.1.0.tgz** (Vulnerable Library)
Found in HEAD commit: 3b956fc649fb80f3c2734d2976b6fce921c134b7
Found in base branch: datasource-meta
Exposure of Sensitive Information to an Unauthorized Actor in NPM simple-get prior to 4.0.1.
Publish Date: 2022-01-26
URL: CVE-2022-0355
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: High - Integrity Impact: None - Availability Impact: None
For more information on CVSS3 Scores, click here.Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0355
Release Date: 2022-01-26
Fix Resolution (simple-get): 3.1.1
Direct dependency fix Resolution (grunt-contrib-compress): 2.0.0
Step up your Open Source Security Game with WhiteSource here