Node-fetch Project Node-fetch — known CVE vulnerabilities

Every CVE whose affected-product data names Node-fetch Project Node-fetch, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-0235 — CVSS 6.1 (medium): node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2022-2596 — CVSS 5.9 (medium): Inefficient Regular Expression Complexity in GitHub repository node-fetch/node-fetch prior to 3.2.10.
• CVE-2020-15168 — CVSS 2.6 (low): node-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content…