latest version of request is vulnerable

zenvia / zenvia-sdk-node

Zenvia CPaaS SDK for Node.js

https://devs.zenvia.com/

MIT License

29 stars 5 forks source link

latest version of request is vulnerable #53

Open Luccazx12 opened 1 year ago

Luccazx12 commented 1 year ago

https://github.com/request/request/issues/3445

rafael-org commented 1 year ago

Thank you for your report!

We will keep an eye for a fix.

However, this issue is not an actual vulnerability for our SDK because it only execute requests to ours servers, which will never do the kind of redirection.