CVE:CVE-2022-1650
CNNVD:CNNVD-202205-3073
EventSource是一种 EventSource 客户端的纯 JavaScript 实现。
EventSource 2.0.2之前版本存在信息泄露漏洞，该漏洞源于将敏感信息暴露给未经授权的 Actor。
solution:Upgrade eventsource eventsource to a higher version than 1.1.1,2.0.2,and avoid the version (,1.1.1),[2.0.0,2.0.2); Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0