GHSA-6xhg-q9c8-rj32MediumCVSS 5.3

Credential leak in react-native-fast-image

Published
May 18, 2021
Last Modified
September 12, 2023

🔗 CVE IDs covered (1)

CVE-2020-7696 →

📋 Description

This affects all versions before version 8.3.0 of package react-native-fast-image. When an image with source={{uri: "...", headers: { host: "somehost.com", authorization: "..." }} is loaded, all other subsequent images will use the same headers, this can lead to signing credentials or other session tokens being leaked to other servers.

🎯 Affected products1

  • npm/react-native-fast-image:< 8.3.0

🔗 References (6)