js-ipfs icon indicating copy to clipboard operation
js-ipfs copied to clipboard

Issue with node-fetch

Open ac12644 opened this issue 3 years ago • 1 comments

  • Version:
  • Platform:
  • Subsystem:

Severity:

Description:

Current ipfs-http-client version is using node-fetch version 2.6.4 which is vulnerable to exposure of sensitive information to an unauthorized actor. Please update it to the latest 2.6.7.

Steps to reproduce the error:

ac12644 avatar Jul 17 '22 00:07 ac12644

Thank you for submitting your first issue to this repository! A maintainer will be here shortly to triage and review. In the meantime, please double-check that you have provided all the necessary information to make this process easy! Any information that can help save additional round trips is useful! We currently aim to give initial feedback within two business days. If this does not happen, feel free to leave a comment. Please keep an eye on how this issue will be labeled, as labels give an overview of priorities, assignments and additional actions requested by the maintainers:

  • "Priority" labels will show how urgent this is for the team.
  • "Status" labels will show if this is ready to be worked on, blocked, or in progress.
  • "Need" labels will indicate if additional input or analysis is required.

Finally, remember to use https://discuss.ipfs.io if you just need general support.

welcome[bot] avatar Jul 17 '22 00:07 welcome[bot]

Closing in favor of https://github.com/ipfs/js-ipfs/issues/4243

SgtPooki avatar Nov 03 '22 16:11 SgtPooki