# CVE-2022-0355

## Summary

- **CVE ID:** CVE-2022-0355
- **Severity:** HIGH
- **CVSS Score:** 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- **CWE:** CWE-212
- **Published:** Jan 26, 2022
- **Last Modified:** Mar 13, 2026

## Description

Improper Removal of Sensitive Information Before Storage or Transfer in NPM simple-get prior to 4.0.1.

## Affected Products

- feross — feross/simple-get (unspecified)

## References

- [CNA](https://huntr.dev/bounties/42c79c23-6646-46c4-871d-219c0d4b4e31)
- [CNA](https://github.com/feross/simple-get/commit/e4af095e06cd69a9235013e8507e220a79b9684f)
- [CNA](https://github.com/advisories/GHSA-wpg7-2c88-r8xv)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.46%
- **EPSS Percentile:** 63.7

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._