← All advisories

Critical severityNVD Advisory· Published May 12, 2022· Updated Aug 3, 2024

Improper Removal of Sensitive Information Before Storage or Transfer in eventsource/eventsource

CVE-2022-1650

Description

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
eventsourcenpm	< 1.1.1	1.1.1
eventsourcenpm	>= 2.0.0, < 2.0.2	2.0.2

Affected products

2

ghsa-coords
pkg:npm/eventsource
Range: < 1.1.1
eventsource/eventsource/eventsourcev5
Range: v2.0.0

Patches

Vulnerability mechanics

References

7

github.com/advisories/GHSA-6h5x-7c5m-7cr7ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-1650ghsaADVISORY
github.com/EventSource/eventsource/commit/f9f6416567bff62c1af2f4314be51d9870e94bc2ghsaWEB
github.com/EventSource/eventsource/pull/273ghsaWEB
github.com/eventsource/eventsource/commit/10ee0c4881a6ba2fe65ec18ed195ac35889583c4ghsaWEB
huntr.dev/bounties/dc9e467f-be5d-4945-867d-1044d27e9b8eghsaWEB
lists.debian.org/debian-lts-announce/2022/12/msg00021.htmlghsamailing-listWEB

News mentions

0

No linked articles in our index yet.