Homepage

node-fetch vulnerabilities

A light-weight module that brings Fetch API to node.js

  • latest version

    3.3.2

  • latest non vulnerable version

    4.0.0-beta.4

  • first published

    10 years ago

  • latest version published

    2 years ago

  • licenses detected

  • View node-fetch package health on Snyk Advisor  (opens in a new tab)
    • Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the node-fetch package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Regular Expression Denial of Service (ReDoS)

    >=3.1.0 <3.2.10
    • M
    Information Exposure

    <2.6.7>=3.0.0 <3.1.1
    • M
    Denial of Service

    <2.6.1>=3.0.0-beta.1 <3.0.0-beta.9

    Package versions

    96 VERSIONS IN TOTAL
    versionpublisheddirect vulnerabilities
    4.0.0-beta.427 Jan, 2022
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    4.0.0-beta.327 Jan, 2022
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    4.0.0-beta.227 Jan, 2022
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    4.0.0-beta.127 Jan, 2022
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    3.3.225 Jul, 2023
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    3.3.111 Mar, 2023
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    3.3.010 Nov, 2022
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    3.2.1031 Jul, 2022
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    3.2.918 Jul, 2022
    • 0
      C
    • 1
      H
    • 0
      M
    • 0
      L
    3.2.812 Jul, 2022
    • 0
      C
    • 1
      H
    • 0
      M
    • 0
      L