OsVault/npm/node-fetch
npm

node-fetch

8 known vulnerabilities · 0 critical · 0 high

CVE-2022-2596MEDIUM

node-fetch Inefficient Regular Expression Complexity

Published Aug 2, 2022
CVE-2020-15168LOW

The `size` option isn't honored after following a redirect in node-fetch

Published Sep 10, 2020
CVE-2022-0235MEDIUM

node-fetch forwards secure headers to untrusted sites

Published Jan 21, 2022
GHSA-qqvm-66q4-vf5c

Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure)

Published Apr 16, 2026
MAL-2022-3991

Malicious code in iv-node-fetch (npm)

Published Jun 20, 2022
MAL-2024-959

Malicious code in node-fetch-full (npm)

Published Feb 2, 2024
MAL-2025-3126

Malicious code in whatwg-node-fetch-polyfill (npm)

Published Apr 3, 2025
MAL-2024-11916

Malicious code in bitmex-node-fetch (npm)

Published Dec 18, 2024
Check your entire dependency tree at onceRun dependency scan →