Vendor

node-fetch

3 known vulnerabilities.

node-fetch at a glance

Last 12 months: 0
Critical · all time: 0
Exploited · all time: 0
Public exploit · all time: 0

New vulnerabilities per month · last 2412 months

Show as table

Month	Vulnerabilities	Critical
Nov 2026	0	0
Oct 2026	0	0
Sep 2026	0	0
Aug 2026	0	0
Jul 2026	0	0
Jun 2026	0	0
May 2026	0	0
Apr 2026	0	0
Mar 2026	0	0
Feb 2026	0	0
Jan 2026	0	0
Dec 2025	0	0
Nov 2025	0	0
Oct 2025	0	0
Sep 2025	0	0
Aug 2025	0	0
Jul 2025	0	0
Jun 2025	0	0
May 2025	0	0
Apr 2025	0	0
Mar 2025	0	0
Feb 2025	0	0
Jan 2025	0	0
Dec 2024	0	0

Most common weaknesses

Products

node-fetch/node-fetch 2 node-fetch 1

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

Medium 5.9

CVE-2022-2596

Inefficient Regular Expression Complexity in node-fetch/node-fetch

Inefficient Regular Expression Complexity in GitHub repository node-fetch/node-fetch prior to 3.2.10.

node-fetch node-fetch/node-fetch node-fetch node-fetch Ubuntu npm

Aug 1, 2022
High 8.8

CVE-2022-0235

Exposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

node-fetch node-fetch/node-fetch node-fetch node-fetch Debian Ubuntu npm

Jan 16, 2022
Low 2.6

CVE-2020-15168

File size limit bypass in node-fetch

node-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people…

node-fetch node-fetch node-fetch node-fetch Debian Ubuntu npm

Sep 10, 2020