xmlhttprequest

npm1 known CVE affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting xmlhttprequestpage 1 of 1

CVE-2020-28502HIGHCVSS 8.1EG 8.1✓ Fixed in 1.7.0
2021-03-05
This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl. Provided requests are sent synchronously (async=False on xhr.open), malicious user input flowing into xhr.send could result in arbitrary code…

Check whether xmlhttprequest is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for xmlhttprequest CVEs against the assets you own.

Start Free Scan →