node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

upgrade to node-fetch npm package
This commit is contained in:
Bhaskara Ram 2022-02-28 12:40:43 +05:30 committed by GitHub
parent 6d0066eafa
commit 8a9ea66bdf
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -6630,7 +6630,7 @@
"resolved": "https://registry.npmjs.org/isomorphic-fetch/-/isomorphic-fetch-2.2.1.tgz",
"integrity": "sha1-YRrhrPFPXoH3KVB0coGf6XM1WKk=",
"requires": {
"node-fetch": "^1.0.1",
"node-fetch": "^2.6.7",
"whatwg-fetch": ">=0.10.0"
}
},