Skip to content
OpenAdvisories

Package · npm

is-http2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.4
    CVE-2022-25906

    is-http2 vulnerable to Improper Input Validation

    All versions of the package is-http2 are vulnerable to Command Injection due to missing input sanitization or other checks, and sandboxes being employed to the isH2 function.

    is-http2 npm