4 matches found
EUVD-2022-0725
Malicious code in bioql PyPI...
8.8CVSS7.9AI score0.02024EPSS
SaveExploits1References8
CVE-2022-0355
Improper Removal of Sensitive Information Before Storage or Transfer in NPM simple-get prior to 4.0.1...
8.8CVSS0.02024EPSS
SaveExploits1References3
CVE-2022-0355
CVE-2022-0355 affects the Node.js package simple-get (versions earlier than 4.0.1). The root cause is improper handling of sensitive data before storage or transfer, allowing exposure of session cookies when fetching remote URLs. Impact can include session hijacking or unauthorized access, depend...
8.8CVSS7.8AI score0.02024EPSS
SaveExploits1References3Affected Software1
20