Filtered by vendor Isomorphic-git Subscriptions
Filtered by product Cors-proxy Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-23664 1 Isomorphic-git 1 Cors-proxy 2024-11-21 8.6 High
The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery (SSRF) due to missing sanitization and validation of the redirection action in middleware.js.