ringcentral/ringcentral-js

Security vulnerability

zucatti opened this issue · 3 comments

zucatti commented

The module relies on node-fetch < 2.6.7 which is known as vulnerable. Please upgrade to the latest version of node-fetch
node-fetch <2.6.7
Severity: high
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - GHSA-r683-j2x4-v87g

suyashcjoshi commented

Thanks @zucatti for reporting this security concern. Let us take a look at it and try to resolve this asap.

suyashcjoshi commented

Fix has been merged

embbnux commented

released with v4.7.2