CVE-2020-7696

This affects all versions of package react-native-fast-image. When an image with source={{uri: "...", headers: { host: "somehost.com", authorization: "..." }} is loaded, all other subsequent images will use the same headers, this can lead to signing credentials or other session tokens being leaked to other servers.

• CWE-200

• https://github.com/DylanVann/react-native-fast-image/issues/690Exploit, Third Party Advisory
• https://github.com/DylanVann/react-native-fast-image/pull/691Exploit, Issue Tracking, Third Party Advisory
• https://snyk.io/vuln/SNYK-JS-REACTNATIVEFASTIMAGE-572228Exploit, Patch, Third Party Advisory
• https://github.com/DylanVann/react-native-fast-image/issues/690Exploit, Third Party Advisory
• https://github.com/DylanVann/react-native-fast-image/pull/691Exploit, Issue Tracking, Third Party Advisory
• https://snyk.io/vuln/SNYK-JS-REACTNATIVEFASTIMAGE-572228Exploit, Patch, Third Party Advisory

Published

Jul 17, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-7690All affected versions <2.0.0 of package jspdf are vulnerable…6.1
• CVE-2020-7691In all versions of the package jspdf, it is possible to use …6.1
• CVE-2020-7692PKCE support is not implemented in accordance with the RFC f…9.1
• CVE-2020-7693Incorrect handling of Upgrade header with the value websocke…5.3
• CVE-2020-7694This affects all versions of package uvicorn. The request lo…7.5
• CVE-2020-7695Uvicorn before 0.11.7 is vulnerable to HTTP response splitti…5.3
• CVE-2020-7697This affects all versions of package mock2easy. a malicious …9.8
• CVE-2020-7698This affects the package Gerapy from 0 and before 0.9.3. The…9.8
• CVE-2020-7699This affects the package express-fileupload before 1.1.8. If…9.8
• CVE-2020-7700All versions of phpjs are vulnerable to Prototype Pollution …9.8
• CVE-2020-7701madlib-object-utils before 0.1.7 is vulnerable to Prototype …9.8
• CVE-2020-7702All versions of package templ8 are vulnerable to Prototype P…9.8