Skip to content
OpenAdvisories

Package · npm

npm-registry-fetch

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    GHSA-jmqm-f2gx-4fjv

    Sensitive information exposure through logs in npm-registry-fetch

    Affected versions of `npm-registry-fetch` are vulnerable to an information exposure vulnerability through log files. The cli supports URLs like `<protocol>://[<user>[:<password>]@]<hostname>[:<port>][:][/]<path>`. The password value is not redacted and is pri…

    npm-registry-fetch npm