Homepage

Insecure Encryption The advisory has been revoked - it doesn't affect any version of package request  (opens in a new tab)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Insecure Encryption vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-JS-REQUEST-1314897
  • published29 Jun 2021
  • disclosed29 Jun 2021
  • creditmeandmax
Report a new vulnerability Found a mistake?

Introduced: 29 Jun 2021

CVE NOT AVAILABLE CWE-326  (opens in a new tab)

Amendment

This was deemed not a vulnerability due to the algorithm being controlled by the developer.

Overview

request is a simplified http request client.

Affected versions of this package are vulnerable to Insecure Encryption due to the usage of the insecure sha1 cipher.

Note: This library is deprecated.

Note: This vulnerability only affects users of hawk.