airbrake@0.3.0 vulnerabilities

DEPRECATION: please use @airbrake/node instead (https://www.npmjs.com/package/@airbrake/node). A Node.js notifier for Airbrake, the leading exception reporting service.

  • latest version

    2.1.3

  • latest non vulnerable version

  • first published

    14 years ago

  • latest version published

    5 years ago

  • deprecated

    Package is deprecated

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the airbrake package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Sensitive Information Exposure

    airbrake is a Node.js notifier for the Airbrake bug and error tracking service. Versions prior to 0.4.0 serialized all environment variables and could lead to sensitive information exposure.

    How to fix Sensitive Information Exposure?

    Upgrade airbrake version 0.4.0 or greater.

    <0.4.0
    • M
    Insecure Default Configuration

    airbrake versions prior to 0.4.0 defaults to sending environment variables over an unencrypted HTTP channel. These can be intercepted by an attacker, potentially exposing sensitive information.

    How to fix Insecure Default Configuration?

    Upgrade to version 0.4.0 or greater.

    <=0.3.8