search

jaggedsoft / node-binance-api

Node Binance API is an asynchronous node.js library for the Binance API designed to be easy to use.
MIT License
1.57k stars 767 forks source link

Security vulnerability in dependency module request #876

Open Jabbaxx opened 1 year ago

Jabbaxx commented 1 year ago

Request is depricated, but has a security issue https://www.npmjs.com/package/request

How to fix it ? I guess an alternative to request has to be found.

npm audit --dry-run

npm audit report

request Severity: moderate Server-Side Request Forgery in Request - https://github.com/advisories/GHSA-p8p7-x288-28g6 No fix available node_modules/request node-binance-api Depends on vulnerable versions of request node_modules/node-binance-api

2 moderate severity vulnerabilities

Some issues need review, and may require choosing a different dependency.

BaraoVlask commented 12 months ago

Updatind the request package to 2.88.2 resolves this issue

Jabbaxx commented 8 months ago

Hello BaraoVlask

Updatind the request package to 2.88.2 resolves this issue

How to fix that in the current version ? Can i rebuild it ? or how ?