node-fetch Exposure of Sensitive Information to Unauthorized Actor

NVD Description

node-fetch before 2.6.7 is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor. If a request is made to redirect to a third-party server, node-fetch will forward all headers including Authorization.

Affected Packages (3)