donacarr
donacarr
Just to let you know that latest dep scan found 9 CRITICAL CVEs: https://nvd.nist.gov/vuln/detail/CVE-2018-8909 https://nvd.nist.gov/vuln/detail/CVE-2020-15258 https://nvd.nist.gov/vuln/detail/CVE-2021-21301 https://nvd.nist.gov/vuln/detail/CVE-2020-27853 https://nvd.nist.gov/vuln/detail/CVE-2021-32665 https://nvd.nist.gov/vuln/detail/CVE-2021-32666 https://nvd.nist.gov/vuln/detail/CVE-2021-32755 https://nvd.nist.gov/vuln/detail/CVE-2021-41093 https://nvd.nist.gov/vuln/detail/CVE-2022-23625
Hi ... any chance to replace "request" with something else not vulnerable?
Hi @mattcolegate , it seems like https://github.com/nodejs/node-gyp/pull/2220 solved issue https://github.com/nodejs/node-gyp/issues/2047 migrating requests to fetch. When do you plan to use the nodejs version containing the fix ?
Hi there... any update on this feature?