CVE-2022-1650

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.

Scoring

Severity

HIGH

CVSS base score

8.1

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

EPSS probability

1.14%

CWE

CWE-212

Published

2022-05-12

Last modified

2026-03-13

Affected products

• eventsource eventsource/eventsource
• eventsource eventsource/eventsource
• eventsource eventsource/eventsource

Weakness type

• CWE-212

Related vulnerabilities

• CVE-2022-2818 — Improper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpit
• CVE-2026-32891 — Anchorr Privilege Escalation: Jellyseerr User → Anchorr Admin via Stored XSS
• CVE-2022-0355 — Improper Removal of Sensitive Information Before Storage or Transfer in feross/simple-get
• CVE-2026-27640 — tfplan2md has Sensitive Value Exposure in Generated Reports
• CVE-2025-65965 — Grype has a credential disclosure vulnerability in its JSON output
• CVE-2020-15094 — RCE in Symfony
• CVE-2022-4734 — Improper Removal of Sensitive Information Before Storage or Transfer in usememos/memos
• CVE-2026-42880 — ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction

Markdown version · Browse all CVEs