Skip to content
OpenAdvisories

Package · Debian

node-request

2 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-28155

    Server-Side Request Forgery in Request

    The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). NOTE: This vulnerability only affects products that are no longer suppo…

    request node-request @cypress/request node-request Debian Ubuntu npm
  • Medium 5.9
    CVE-2017-16026

    Remote Memory Exposure in request

    Request is an http client. If a request is made using ```multipart```, and the body type is a ```number```, then the specified number of non-zero memory is passed in the body. This affects Request >=2.2.6 <2.47.0 || >2.51.0 <=2.67.0.

    HackerOne request node module request node-request Debian npm