Isomorphic Git Cors Proxy vulnerabilities

1 vulnerability

Known vulnerabilities in Isomorphic Git Cors Proxy, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.6CVE-2021-23664isomorphic-gitcors-proxy+1
EPSS score
1.39%
The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery (SSRF) due to missing sanitization and validation of the redirection action in middleware.js.