@axosoft/azure-devops-node-api (6.6.3), @capgeminiuk/generator-powerapps-project (>=0.1.55, <=0.6.6) +70 more potentially affected by CVE-2023-30846 via typed-rest-client (>=1.0.7, <=1.7.3)

typed-rest-client NPM version =1.0.7, =0.1.55, =1.0.8-1, =2.0.0, =2.0.1-1, =1.1.0, =1.79.5, =0.0.1-develop.1, =1.0.0, =6.0.0 - @kcutils/color 0.2.0-rc.3 - @kcutils/error 0.3.0-rc.1 - @kcutils/helper 0.5.0-rc.5 - @kcutils/logger 0.5.0-rc.5 and more Source cves: CVE-2023-30846 Source advisory:...

CVE-2023-30846

creationtimestamp| type| source ---|---|--- 2023-04-27 00:25:22+00:00| seen| https://t.me/cibsecurity/62948...

CVE-2023-30846

typed-rest-client is a library for Node Rest and Http Clients with typings for use with TypeScript. Users of the typed-rest-client library version 1.7.3 or lower are vulnerable to leak authentication data to 3rd parties. The flow of the vulnerability is as follows: First, send any request with...

CVE-2023-30846

The CVE-2023-30846 issue affects typed-rest-client

CVE-2023-30846 typed-rest-client vulnerable to potential leak of authentication data to 3rd parties

typed-rest-client is a library for Node Rest and Http Clients with typings for use with TypeScript. Users of the typed-rest-client library version 1.7.3 or lower are vulnerable to leak authentication data to 3rd parties. The flow of the vulnerability is as follows: First, send any request with...