CVE-2022-2596: Node-Fetch Project Node-Fetch

Medium severity, CVSS 5.9. EPSS: 1.3% chance of exploitation in the next 30 days.

Inefficient Regular Expression Complexity in GitHub repository node-fetch/node-fetch prior to 3.2.10.

Affected products

• Node-Fetch Project Node-Fetch: from 3.0.0, before 3.2.10 (fixed in 3.2.10)

Published 2022-08-01. Last modified 2026-10-07.