Skip to content

Security vulnerability in dependency module request #876

Open

Description

@Jabbaxx

Request is depricated, but has a security issue
https://www.npmjs.com/package/request

How to fix it ? I guess an alternative to request has to be found.

npm audit --dry-run

npm audit report

request *
Severity: moderate
Server-Side Request Forgery in Request - GHSA-p8p7-x288-28g6
No fix available
node_modules/request
node-binance-api *
Depends on vulnerable versions of request
node_modules/node-binance-api

2 moderate severity vulnerabilities

Some issues need review, and may require choosing
a different dependency.

Activity

  1. guilhermebillig commented on Jul 7, 2023

    @guilhermebillig

    Updatind the request package to 2.88.2 resolves this issue

  2. Jabbaxx commented on Nov 2, 2023

    @Jabbaxx
    Author

    Hello BaraoVlask

    Updatind the request package to 2.88.2 resolves this issue

    How to fix that in the current version ? Can i rebuild it ? or how ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions