simple-get@3.1.0 vulnerabilities

Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines.

Direct Vulnerabilities

Known vulnerabilities in the simple-get package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Information Exposure

Affected versions of this package are vulnerable to Information Exposure. When getting Location response header after fetching a remote url with Cookie, it will follow that url and fetch it with the provided cookie which will be then leaked to the attacker .

How to fix Information Exposure?

Upgrade simple-get to version 2.8.2, 3.1.1, 4.0.1 or higher.

<2.8.2 >=3.0.0 <3.1.1 >=4.0.0 <4.0.1