CVE-2022-33987: Got Project Got

Medium severity, CVSS 5.3. EPSS: 2.4% chance of exploitation in the next 30 days.

The got package before 12.1.0 (also fixed in 11.8.5) for Node.js allows a redirect to a UNIX socket.

Affected products

• Got Project Got: before 11.8.5 (fixed in 11.8.5)

Published 2022-06-18. Last modified 2026-06-17.