Skip to content
5.3 Medium

CVE-2020-7696 This affects all versions of package react-native-fast-image

Description

This affects all versions of package react-native-fast-image. When an image with source={{uri: "...", headers: { host: "somehost.com", authorization: "..." }} is loaded, all other subsequent images will use the same headers, this can lead to signing credentials or other session tokens being leaked to other servers.

Affected products and versions

Product Affected versions Fixed in
react-native-fast-image Versions not published
Track this CVE