We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
graphql-request depends on cross-fetch with outdated node-fetch version:
├─┬ graphql-request 3.7.0 │ └─┬ cross-fetch 3.1.4 │ └── node-fetch 2.6.1
More info:
┌─────────────────────┬────────────────────────────────────────────────────────────────────────────────────────┐ │ high │ node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor │ ├─────────────────────┼────────────────────────────────────────────────────────────────────────────────────────┤ │ Package │ node-fetch │ ├─────────────────────┼────────────────────────────────────────────────────────────────────────────────────────┤ │ Vulnerable versions │ <2.6.7 │ ├─────────────────────┼────────────────────────────────────────────────────────────────────────────────────────┤ │ Patched versions │ >=2.6.7 │ ├─────────────────────┼────────────────────────────────────────────────────────────────────────────────────────┤ │ More info │ https://github.com/advisories/GHSA-r683-j2x4-v87g │ └─────────────────────┴────────────────────────────────────────────────────────────────────────────────────────┘ ┌─────────────────────┬──────────────────────────────────────────────────────────────────────────┐ │ low │ The `size` option isn't honored after following a redirect in node-fetch │ ├─────────────────────┼──────────────────────────────────────────────────────────────────────────┤ │ Package │ node-fetch │ ├─────────────────────┼──────────────────────────────────────────────────────────────────────────┤ │ Vulnerable versions │ <2.6.1 │ ├─────────────────────┼──────────────────────────────────────────────────────────────────────────┤ │ Patched versions │ >=2.6.1 │ ├─────────────────────┼──────────────────────────────────────────────────────────────────────────┤ │ More info │ https://github.com/advisories/GHSA-w7rc-rwvf-8q5r │ └─────────────────────┴──────────────────────────────────────────────────────────────────────────┘
The text was updated successfully, but these errors were encountered:
cross-fetch v3.1.5 also seems to use node-fetch ^2.6.7 if that's any easier to use
v3.1.5
^2.6.7
Sorry, something went wrong.
also this issue is very critical for everyone that run background requests in service workers
lquixada/cross-fetch#78
cross-fetch
Successfully merging a pull request may close this issue.
graphql-request depends on cross-fetch with outdated node-fetch version:
More info:
The text was updated successfully, but these errors were encountered: