CVE-2017-16026CWE-201

Request is an http client

published June 4, 2018

CVSS
—
EPSS
3%
Percentile
85.0
In the wild
Unconfirmed
What it is

Request is an http client. If a request is made using ```multipart```, and the body type is a ```number```, then the specified number of non-zero memory is passed in the body. This affects Request >=2.2.6 <2.47.0 || >2.51.0 <=2.67.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02563 · 85.0th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2018-06-04T19:00Z
EPSS history
Timeline
  • 04 JUN 19:00Z
    Request is an http client
    cvelistv5