CVE-2020-7764: Find-My-Way Project Find-My-Way

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

This affects the package find-my-way before 2.2.5, from 3.0.0 and before 3.0.5. It accepts the Accept-Version' header by default, and if versioned routes are not being used, this could lead to a denial of service. Accept-Version can be used as an unkeyed header in a cache poisoning attack.

Affected products

• Find-My-Way Project Find-My-Way: before 2.2.5 (fixed in 2.2.5); from 3.0.0, before 3.0.5 (fixed in 3.0.5)

Published 2020-11-08. Last modified 2026-06-17.