malicious website could have learned the size of a cross-origin resource that supported Range requests
Details
CVE-2022-31736 affects multiple packages. A malicious website could have learned the size of a cross-origin resource that supported Range requests. See references for individual vulnerability details.