CVE-2025-54956

Low

The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the…

mitre·CWE-669·Published 2025-08-03

CVSS

3.2

EPSS

0.00

KEV

Exploits

cve.orgen

155 chars

The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request.

NVDen

155 chars

The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request.

El paquete gh para R anterior a 1.5.0 entrega una respuesta HTTP en una estructura de datos que incluye el encabezado de autorización de la solicitud HTTP correspondiente.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	3.2	—	—	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
3.1	Primary	cve.org	3.2	—	—	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
3.1	Secondary	NVD	3.2	1.4	1.4	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N