Machine-In-The-Middle in airtable

Description

Affected versions of airtable are vulnerable to Machine-In-The-Middle. The package has SSL certificate validation disabled by default unintentionally. This may allow attackers in a privileged network position to decrypt intercepted traffic.

Recommendation

Update the airtable package to the latest compatible version. Followings are version details:

• Affected version(s): >= 0.1.19, < 0.7.2
• Patched version(s): 0.7.2

References

• GHSA-jrj9-5qp6-2v8q
• www.npmjs.com

Related Issues

• Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability - CVE-2026-41265
• Prototype pollution vulnerability found in Mermaid's bundled version of DOMPurify - Vulnerability
• string-kit Inefficient Regular Expression Complexity vulnerability - CVE-2021-4299
• TypeORM: SQL Injection in UpdateQueryBuilder/SoftDeleteQueryBuilder orderBy (MySQL/MariaDB) - Vulnerability

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

airtable