| Package | Affected versions | Patched versions |
|---|---|---|
| eventsource | ≥ 2.0.0, < 2.0.2< 1.1.1 | 2.0.21.1.1 |
| eventsource | ≥ 2.0.0, < 2.0.2< 1.1.1 | 2.0.21.1.1 |
When fetching an url with a link to an external site (Redirect), the users Cookies & Autorisation headers are leaked to the third party application. According to the same-origin-policy, the header should be "sanitized."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free