PT-2022-21949

CVE-2022-33987

Published

2022-06-18

Updated

2026-09-18

CVSS 3.1

5.3

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions got package versions prior to 12.1.0 got package versions prior to 11.8.5

Description The issue allows a redirect to a UNIX socket. This is related to the got package for Node.js.

Recommendations For versions prior to 12.1.0, update to version 12.1.0 or later. For versions prior to 11.8.5, update to version 11.8.5 or later.

Exploitability

Exploit

Fix

Vendors

Affected products

Related identifiers

GHSA-PFRX-2Q88-QQ97

ALSA-2022:6448

ALSA-2022:6595

CESA-2022_6448

CESA-2022_6449

CLEANSTART-2026-AD27625

CLEANSTART-2026-TZ34913

CLEANSTART-2026-UC56558

RHSA-2022:6389

RHSA-2022:6448

RHSA-2022_6448

RHSA-2022:6449

RHSA-2022_6449

RHSA-2022:6595

RHSA-2022_6595

RHSA-2022:6985

RLSA-2022:6448

RLSA-2022:6449

RLSA-2022:6595

Found an issue in the description? Have something to add? Feel free to write us 👾