Vulnerabilities (CVE)

Filtered by vendor Isomorphic-git Subscribe
Filtered by product Cors-proxy
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-23664 1 Isomorphic-git 1 Cors-proxy 2024-02-28 5.0 MEDIUM 7.5 HIGH
The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery (SSRF) due to missing sanitization and validation of the redirection action in middleware.js.