36 matches found
Improper Protection of Alternate Path
Overview renovate is a dependency updater. Affected versions of this package are vulnerable to Improper Protection of Alternate Path via the find function in lib/util/host-rules.ts, where administrator-configured HTTP headers such as authentication credentials for one host can be sent to a...
7.1CVSS5.8AI score0.00185EPSS
SaveExploits0References2
20