20190403-utils (1.0.0), 3nit-utils (>=0.24.0, <=1.0.2) +4747 more potentially affected by CVE-2020-15168 via node-fetch (>=2.0.0, <=2.6.0)

node-fetch NPM version =2.0.0, =0.24.0, =0.0.0-alpha.1, =1.0.43, =0.0.80, =1.0.0-beta.1, =0.0.0-canary.0, =0.0.1, =2.0.0-alpha10, =1.0.0-beta, =0.1.0, =2.0.0-alpha10, =2.0.3 and more Source cves: CVE-2020-15168 Source advisory: GHSA-W7RC-RWVF-8Q5R...

GHSA-W7RC-RWVF-8Q5R The `size` option isn't honored after following a redirect in node-fetch

Impact Node Fetch did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people, this fix will have a little or no impact. However, if you are relyin...

@evolvere/sgp-ui (>=1.6.4, <=1.6.10), @node-amazon/mws (>=0.0.2, <=0.0.3) +24 more potentially affected by CVE-2020-15168 via node-fetch (>=3.0.0-beta.7, <=3.0.0-beta.8)

node-fetch NPM version =3.0.0-beta.7, =1.6.4, =0.0.2, =0.0.2, =0.0.2, =1.2.8, =1.2.9, =0.1.1, =1.2.0, =3.6.11, =1.10.46, =7.9.40, =7.16.4 - ky-universal 0.8.1 - letterboxd-client 0.1.0 - node-walmart 0.0.8 and more Source cves: CVE-2020-15168 Source advisory: OSV:GHSA-W7RC-RWVF-8Q5R...

The `size` option isn't honored after following a redirect in node-fetch

Impact Node Fetch did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people, this fix will have a little or no impact. However, if you are relyin...

CVE-2020-15168: Improper Input Validation

node-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people, this fix will have a little or no...

PT-2020-6063

Name of the Vulnerable Software and Affected Versions node-fetch versions prior to 2.6.1 node-fetch versions prior to 3.0.0-beta.9 Description The issue is related to the node-fetch library not honoring the size option after following a redirect. This means that when a content size is over the...