Skip to content
OpenAdvisories

Package · npm

@isomorphic-git/cors-proxy

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.6
    CVE-2021-23664

    Server-side Request Forgery (SSRF)

    The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery (SSRF) due to missing sanitization and validation of the redirection action in middleware.js.

    @isomorphic-git/cors-proxy npm