CVE-2022-0355: Simple-Get Project Simple-Get

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

Improper Removal of Sensitive Information Before Storage or Transfer in NPM simple-get prior to 4.0.1.

Affected products

• Simple-Get Project Simple-Get: before 2.8.2 (fixed in 2.8.2); from 3.0.0, before 3.1.1 (fixed in 3.1.1); version 4.0.0 only

Published 2022-01-26. Last modified 2026-06-17.