{"id":"CVE-2022-1650","aliases":["CLSA-2026-1776818200","CLSA-2026-1781139205","DEBIAN-CVE-2022-1650","DLA-3235-1","EUVD-2022-2797","GHSA-6h5x-7c5m-7cr7","RHBA-2022:5721","RHBA-2022:5747","RHBA-2022:5749","RHSA-2022:6037","RHSA-2022:6057","RLSA-2022:6057","ROOT-APP-NPM-CVE-2022-1650","UBUNTU-CVE-2022-1650","USN-6082-1"],"status":"published","title":"Improper Removal of Sensitive Information Before Storage or Transfer in eventsource/eventsource","description":"Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01861,"percentile":0.79398,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200","CWE-212"],"published":"2022-05-12T00:00:00Z","modified":"2026-11-03T08:00:59Z","fixes":[{"ecosystem":"npm","package":"eventsource","fixed_in":["1.1.1","2.0.2"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:npm","package":"eventsource","fixed_in":["0.1.6-tuxcare.1","1.1.0-tuxcare.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"node-eventsource","fixed_in":["2.0.2+~1.1.8-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"node-eventsource","fixed_in":["2.0.2+~1.1.8-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"node-eventsource","fixed_in":["2.0.2+~1.1.8-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"node-eventsource","fixed_in":["0.2.1-1+deb10u1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-aspnetcore-runtime-6.0","fixed_in":["0:6.0.7-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-aspnetcore-targeting-pack-6.0","fixed_in":["0:6.0.7-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet","fixed_in":["0:6.0.107-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-apphost-pack-6.0","fixed_in":["0:6.0.7-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-debuginfo","fixed_in":["0:6.0.107-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-host","fixed_in":["0:6.0.7-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-hostfxr-6.0","fixed_in":["0:6.0.7-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-runtime-6.0","fixed_in":["0:6.0.7-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-sdk-6.0","fixed_in":["0:6.0.107-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts","fixed_in":["0:6.0.107-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-targeting-pack-6.0","fixed_in":["0:6.0.7-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-templates-6.0","fixed_in":["0:6.0.107-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-netstandard-targeting-pack-2.1","fixed_in":["0:6.0.107-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-runtime-6.0","fixed_in":["0:6.0.7-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-targeting-pack-6.0","fixed_in":["0:6.0.7-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet","fixed_in":["0:6.0.107-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-6.0","fixed_in":["0:6.0.7-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-6.0-debuginfo","fixed_in":["0:6.0.7-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host","fixed_in":["0:6.0.7-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host-debuginfo","fixed_in":["0:6.0.7-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-6.0","fixed_in":["0:6.0.7-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-6.0-debuginfo","fixed_in":["0:6.0.7-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-6.0","fixed_in":["0:6.0.7-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-6.0-debuginfo","fixed_in":["0:6.0.7-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-6.0","fixed_in":["0:6.0.107-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-6.0-debuginfo","fixed_in":["0:6.0.107-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-targeting-pack-6.0","fixed_in":["0:6.0.7-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-templates-6.0","fixed_in":["0:6.0.107-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0","fixed_in":["0:6.0.107-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0-debuginfo","fixed_in":["0:6.0.107-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0-debugsource","fixed_in":["0:6.0.107-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netstandard-targeting-pack-2.1","fixed_in":["0:6.0.107-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-apphost-pack-6.0-debuginfo","fixed_in":["0:6.0.7-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-host-debuginfo","fixed_in":["0:6.0.7-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-hostfxr-6.0-debuginfo","fixed_in":["0:6.0.7-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-runtime-6.0-debuginfo","fixed_in":["0:6.0.7-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-6.0-debuginfo","fixed_in":["0:6.0.107-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-6.0-source-built-artifacts","fixed_in":["0:6.0.107-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet6.0-debuginfo","fixed_in":["0:6.0.107-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet6.0-debugsource","fixed_in":["0:6.0.107-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"aspnetcore-runtime-6.0","fixed_in":["0:6.0.7-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"aspnetcore-targeting-pack-6.0","fixed_in":["0:6.0.7-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-apphost-pack-6.0","fixed_in":["0:6.0.7-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-apphost-pack-6.0-debuginfo","fixed_in":["0:6.0.7-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-host","fixed_in":["0:6.0.7-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-host-debuginfo","fixed_in":["0:6.0.7-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-hostfxr-6.0","fixed_in":["0:6.0.7-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-hostfxr-6.0-debuginfo","fixed_in":["0:6.0.7-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-runtime-6.0","fixed_in":["0:6.0.7-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-runtime-6.0-debuginfo","fixed_in":["0:6.0.7-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-sdk-6.0","fixed_in":["0:6.0.107-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-sdk-6.0-debuginfo","fixed_in":["0:6.0.107-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-targeting-pack-6.0","fixed_in":["0:6.0.7-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-templates-6.0","fixed_in":["0:6.0.107-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0","fixed_in":["0:6.0.107-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0-debuginfo","fixed_in":["0:6.0.107-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0-debugsource","fixed_in":["0:6.0.107-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"netstandard-targeting-pack-2.1","fixed_in":["0:6.0.107-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-apphost-pack-6.0-debuginfo","fixed_in":["0:6.0.7-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-host-debuginfo","fixed_in":["0:6.0.7-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-hostfxr-6.0-debuginfo","fixed_in":["0:6.0.7-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-runtime-6.0-debuginfo","fixed_in":["0:6.0.7-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-sdk-6.0-debuginfo","fixed_in":["0:6.0.107-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-sdk-6.0-source-built-artifacts","fixed_in":["0:6.0.107-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet6.0-debuginfo","fixed_in":["0:6.0.107-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet6.0-debugsource","fixed_in":["0:6.0.107-1.el9_0"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"eventsource","fixed_in":["1.0.7-aikido.1"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/eventsource","fixed_in":["1.0.7-root.io.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"node-eventsource","fixed_in":["0.1.6-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"node-eventsource","fixed_in":["0.2.1-1+deb10u1build0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"node-eventsource","fixed_in":["0.2.1-1+deb10u1build0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"node-eventsource","fixed_in":["1.1.0+~1.1.8-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"eventsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1"}]}]},{"source":"ghsa","ecosystem":"npm","package":"eventsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0"},{"fixed":"2.0.2"}]}]},{"source":"osv","ecosystem":"TuxCare:npm","package":"eventsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.1.6-tuxcare.0"},{"fixed":"0.1.6-tuxcare.1"}]}],"versions":["0.1.6"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"eventsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0-tuxcare.0"},{"fixed":"1.1.0-tuxcare.1"}]}],"versions":["1.1.0"]},{"source":"osv","ecosystem":"Debian:12","package":"node-eventsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2+~1.1.8-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"node-eventsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2+~1.1.8-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"node-eventsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2+~1.1.8-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"node-eventsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.1-1+deb10u1"}]}],"versions":["0.2.1-1"]},{"source":"osv","ecosystem":"npm","package":"eventsource","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.1.1"}]}]},{"source":"osv","ecosystem":"npm","package":"eventsource","ranges":[{"type":"SEMVER","events":[{"introduced":"2.0.0"},{"fixed":"2.0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-aspnetcore-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-aspnetcore-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-apphost-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-hostfxr-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-sdk-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-templates-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-templates-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-apphost-pack-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-hostfxr-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-runtime-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-6.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet6.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"aspnetcore-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"aspnetcore-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-apphost-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-apphost-pack-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-hostfxr-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-hostfxr-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-runtime-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-sdk-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-sdk-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-templates-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-apphost-pack-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-hostfxr-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-runtime-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.7-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-sdk-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-sdk-6.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet6.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.107-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-aspnetcore-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-aspnetcore-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-apphost-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-hostfxr-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-sdk-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-templates-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-templates-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-apphost-pack-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-hostfxr-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-runtime-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-3.1-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet3.1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dotnet3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Root:npm","package":"eventsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-aikido.1"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/eventsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-root.io.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"node-eventsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.6-1ubuntu0.1~esm1"}]}],"versions":["0.1.6-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"node-eventsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.1-1+deb10u1build0.18.04.1"}]}],"versions":["0.2.1-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"node-eventsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.1-1+deb10u1build0.20.04.1"}]}],"versions":["0.2.1-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"node-eventsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0+~1.1.8-1ubuntu0.1"}]}],"versions":["1.0.7-1","1.1.0+~1.1.8-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"node-eventsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.6-1ubuntu0.1~esm1"}]}],"versions":["0.1.6-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"node-eventsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.1-1+deb10u1build0.18.04.1"}]}],"versions":["0.2.1-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"node-eventsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.1-1+deb10u1build0.20.04.1"}]}],"versions":["0.2.1-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"node-eventsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0+~1.1.8-1ubuntu0.1"}]}],"versions":["1.0.7-1","1.1.0+~1.1.8-1"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"eventsource","product":"eventsource"},{"vendor":"eventsource","product":"eventsource/eventsource"}],"references":[{"url":"https://huntr.dev/bounties/dc9e467f-be5d-4945-867d-1044d27e9b8e","tags":["x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","web","article","report"]},{"url":"https://github.com/eventsource/eventsource/commit/10ee0c4881a6ba2fe65ec18ed195ac35889583c4","tags":["x_transferred","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/12/msg00021.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1650","tags":["advisory"]},{"url":"https://github.com/EventSource/eventsource/pull/273#issuecomment-1127624508","tags":["web"]},{"url":"https://github.com/EventSource/eventsource/commit/f9f6416567bff62c1af2f4314be51d9870e94bc2","tags":["web"]},{"url":"https://github.com/advisories/GHSA-6h5x-7c5m-7cr7"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1650.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-1650","tags":["advisory"]},{"url":"https://github.com/eventsource/eventsource","tags":["package"]},{"url":"https://access.redhat.com/errata/RHBA-2022:5721","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhba-2022_5721.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2085307","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1650","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHBA-2022:5747","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhba-2022_5747.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2022:5749","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhba-2022_5749.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6037","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2115183","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6037.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-34716","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-34716","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34716","tags":["advisory"]},{"url":"https://github.com/dotnet/announcements/issues/232","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6057","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6057.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:6057","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-1650","tags":["report"]},{"url":"https://huntr.dev/bounties/dc9e467f-be5d-4945-867d-1044d27e9b8e/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6082-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-1650","title":"Improper Removal of Sensitive Information Before Storage or Transfer in eventsource/eventsource","description":"Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.","status":"published","published":"2022-05-12T00:00:00Z","modified":"2024-08-03T00:10:03.747Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-212"],"updated_at":"2026-11-02T14:34:38.581997Z"}],"euvd":[{"id":"EUVD-2022-2797","description":"Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.","status":"published","published":"2022-05-12T00:00:00Z","modified":"2024-08-03T00:10:03Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-03T03:26:00.556048Z"}],"ghsa":[{"id":"GHSA-6h5x-7c5m-7cr7","title":"Exposure of Sensitive Information in eventsource","description":"When fetching an url with a link to an external site (Redirect), the users Cookies \u0026 Autorisation headers are leaked to the third party application. According to the same-origin-policy, the header should be \"sanitized.\"","status":"published","published":"2022-05-13T00:01:12Z","modified":"2023-11-28T23:43:16Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-200","CWE-212"],"updated_at":"2026-11-02T14:37:22.840002Z"}],"nvd":[{"id":"CVE-2022-1650","description":"Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.","status":"published","published":"2022-05-12T11:15:07.29Z","modified":"2026-06-17T04:22:51.493Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-212"],"updated_at":"2026-11-02T14:07:19.51203Z"}],"osv":[{"id":"CVE-2022-1650","title":"Improper Removal of Sensitive Information Before Storage or Transfer in eventsource/eventsource","description":"Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.","status":"published","published":"2022-05-12T00:00:00Z","modified":"2026-10-28T02:31:13.473199334Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-212"],"updated_at":"2026-11-02T15:44:23.245966Z"},{"id":"DEBIAN-CVE-2022-1650","description":"Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.","status":"published","published":"2022-05-12T11:15:07.29Z","modified":"2026-11-03T08:00:59.876467411Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"GHSA-6h5x-7c5m-7cr7","title":"Exposure of Sensitive Information in eventsource","description":"When fetching an url with a link to an external site (Redirect), the users Cookies \u0026 Autorisation headers are leaked to the third party application. According to the same-origin-policy, the header should be \"sanitized.\"","status":"published","published":"2022-05-13T00:01:12Z","modified":"2023-11-08T04:07:50.588673Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-200","CWE-212"],"updated_at":"2026-11-02T15:46:39.618611Z"},{"id":"RHBA-2022:5721","title":"Red Hat Bug Fix Advisory: .NET 6.0 on RHEL 7 bugfix update","status":"published","published":"2024-09-16T07:51:01Z","modified":"2026-10-02T10:01:35Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHBA-2022:5747","title":"Red Hat Bug Fix Advisory: .NET 6.0 bugfix update","status":"published","published":"2024-09-16T07:51:09Z","modified":"2026-10-02T10:01:35Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHBA-2022:5749","title":"Red Hat Bug Fix Advisory: .NET 6.0 bugfix update","status":"published","published":"2024-09-16T07:51:17Z","modified":"2026-10-02T10:01:36Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2022:6037","title":"Red Hat Security Advisory: .NET Core 3.1 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T08:40:51Z","modified":"2026-10-02T10:02:01Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6057","title":"Red Hat Security Advisory: .NET Core 3.1 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T08:41:15Z","modified":"2026-10-02T10:02:02Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RLSA-2022:6057","title":"Moderate: .NET Core 3.1 security, bug fix, and enhancement update","description":".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 3.1.422 and .NET Runtime 3.1.28.\n\nSecurity Fix(es):\n\n* dotnet: External Entity Injection during XML signature verification (CVE-2022-34716)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-08-15T07:23:44Z","modified":"2026-02-04T20:45:09.170305Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-1650","description":"Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.","status":"published","published":"2022-05-12T11:15:00Z","modified":"2026-02-04T09:34:26.566468Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T16:53:52.391598Z"},{"id":"CLSA-2026-1776818200","title":"TuxCare security update for eventsource (1 CVE)","description":"TuxCare rebuilt eventsource to address 1 CVE. Fixed in 0.1.6-tuxcare.1.","status":"published","published":"2026-08-04T14:52:27Z","modified":"2026-10-15T09:45:46.456768114Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1781139205","title":"TuxCare security update for eventsource (1 CVE)","description":"TuxCare rebuilt eventsource to address 1 CVE. Fixed in 1.1.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:36Z","modified":"2026-10-15T09:47:51.194052863Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"DLA-3235-1","title":"node-eventsource - security update","status":"published","published":"2022-12-11T00:00:00Z","modified":"2026-03-09T01:19:50.634315Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"ROOT-APP-NPM-CVE-2022-1650","title":"CVE-2022-1650 in eventsource - Patched by Root","description":"Root has patched CVE-2022-1650 in the eventsource package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-08-28T04:58:09Z","modified":"2026-08-28T06:30:03.042213632Z","updated_at":"2026-11-02T15:53:27.362922Z"},{"id":"USN-6082-1","title":"node-eventsource vulnerability","description":"It was discovered that EventSource incorrectly handled certain inputs. If a\nuser or an automated system were tricked into opening a specially crafted\ninput file, a remote attacker could possibly use this issue to obtain \nsensitive information.\n","status":"published","published":"2023-05-17T09:06:22Z","modified":"2026-06-25T13:32:04.180074406Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}