Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

npm audit says there is a security issue for request package #149

Open
jeanatpi opened this issue Jun 19, 2023 · 2 comments
Open

npm audit says there is a security issue for request package #149

jeanatpi opened this issue Jun 19, 2023 · 2 comments

Comments

@jeanatpi
Copy link

Running npm audit gives me a security issue for request package:

Severity: moderate
Server-Side Request Forgery in Request - https://github.com/advisories/GHSA-p8p7-x288-28g6
No fix available
node_modules/request
  clickhouse  *
  Depends on vulnerable versions of request
  node_modules/clickhouse

2 moderate severity vulnerabilities

Looking at this package it looks like deprecated: https://www.npmjs.com/package/request

@jeetonweb
Copy link

The request package being not in support has lots of warnings. We got rid of from our application in favour of Axious.

However, we had to get it into the application because of Clickhouse dependency now!

@alexey-milovidov
Copy link

Maybe this will help: https://github.com/ClickHouse/clickhouse-js

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants