CLSA-2026-1773965914 TuxCare security update for @cypress/request (1 CVE)

TuxCare rebuilt @cypress/request to address 1 CVE. Fixed in 2.88.12-tuxcare.1...

PT-2026-74035

TuxCare rebuilt @cypress/request to address 1 CVE. Fixed in 2.88.12-tuxcare.1...

Server-Side Request Forgery in Request

The request package through 2.88.2 for Node.js and the @cypress/request package prior to 3.0.0 allow a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect HTTP to HTTPS, or HTTPS to HTTP. NOTE: The request package is no longer supported by the maintain...

GHSA-P8P7-X288-28G6 Server-Side Request Forgery in Request

The request package through 2.88.2 for Node.js and the @cypress/request package prior to 3.0.0 allow a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect HTTP to HTTPS, or HTTPS to HTTP. NOTE: The request package is no longer supported by the maintain...

4chanscraper (>=1.0.0, <=1.0.4), @10up/block-components (>=1.7.1-next.1, <=1.15.12-alpha.0) +436 more potentially affected by CVE-2023-28155 via @cypress/request (>=2.88.5, <=2.88.12)

@cypress/request NPM version =2.88.5, =1.0.0, =1.7.1-next.1, =1.0.12, =3.7.2-beta.11, =1.0.0, =1.0.2, =1.1.5, =0.0.1-0b9ab070, =0.21.0-99e3fbca, =0.1.1, =4.1.0, =1970.1.1-alpha.1338, =1.0.0, =0.33.2, =0.42.0 and more Source cves: CVE-2023-28155 Source advisory: GHSA-P8P7-X288-28G6...

4chanscraper (>=1.0.0, <=1.0.4), @10up/block-components (>=1.7.1-next.1, <=1.15.12-alpha.0) +436 more potentially affected by CVE-2023-28155 via @cypress/request (>=2.88.5, <=2.88.12)

@cypress/request NPM version =2.88.5, =1.0.0, =1.7.1-next.1, =1.0.12, =3.7.2-beta.11, =1.0.0, =1.0.2, =1.1.5, =0.0.1-0b9ab070, =0.21.0-99e3fbca, =0.1.1, =4.1.0, =1970.1.1-alpha.1338, =1.0.0, =0.33.2, =0.42.0 and more Source cves: CVE-2023-28155 Source advisory: MEND:CVE-2023-28155...