Homepage
About Snyk

react-native-fast-image@6.0.5 vulnerabilities

🚩 FastImage, performant React Native image component.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the react-native-fast-image package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Information Exposure

react-native-fast-image is a FastImage, performant React Native image component.

Affected versions of this package are vulnerable to Information Exposure. When an image with source={{uri: "...", headers: { host: "somehost.com", authorization: "..." }} is loaded, all other subsequent images will use the same headers, this can lead to signing credentials or other session tokens being leaked to other servers.

How to fix Information Exposure?

Upgrade react-native-fast-image to version 8.3.0 or higher.

<8.3.0
Go back to all versions of this package