developit / unfetch

🐕 Bare minimum 500b fetch polyfill.
https://npm.im/unfetch
MIT License
5.7k stars 201 forks source link

Update node-fetch version. Refs #143 #154

Closed matheo closed 1 year ago

robreinhard commented 2 years ago

This needs to be high priority @developit, there's a vulnerability in node-fetch https://nvd.nist.gov/vuln/detail/CVE-2022-0235

lounsbrough commented 2 years ago

I assume there might be breaking changes here, specifically the module has moved to ESM only.

developit commented 1 year ago

fixed in #156