High severity8.1NVD Advisory· Published May 12, 2022· Updated Jun 17, 2026
CVE-2022-1650
CVE-2022-1650
Description
Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
eventsourcenpm | < 1.1.1 | 1.1.1 |
eventsourcenpm | >= 2.0.0, < 2.0.2 | 2.0.2 |
Affected products
4cpe:2.3:a:eventsource:eventsource:*:*:*:*:node.js:*:*:*+ 1 more
- cpe:2.3:a:eventsource:eventsource:*:*:*:*:node.js:*:*:*range: <1.1.1
- (no CPE)range: v2.0.0
Patches
Vulnerability mechanics
References
7- github.com/eventsource/eventsource/commit/10ee0c4881a6ba2fe65ec18ed195ac35889583c4nvdPatchThird Party AdvisoryWEB
- huntr.dev/bounties/dc9e467f-be5d-4945-867d-1044d27e9b8envdExploitIssue TrackingPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-6h5x-7c5m-7cr7ghsaADVISORY
- lists.debian.org/debian-lts-announce/2022/12/msg00021.htmlnvdMailing ListThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2022-1650ghsaADVISORY
- github.com/EventSource/eventsource/commit/f9f6416567bff62c1af2f4314be51d9870e94bc2ghsaWEB
- github.com/EventSource/eventsource/pull/273ghsaWEB
News mentions
0No linked articles in our index yet.