Description
Affected versions of airtable are vulnerable to Machine-In-The-Middle. The package has SSL certificate validation disabled by default unintentionally. This may allow attackers in a privileged network position to decrypt intercepted traffic.
Recommendation
Update the airtable package to the latest compatible version. Followings are version details:
- Affected version(s): >= 0.1.19, < 0.7.2
- Patched version(s): 0.7.2
References
Could your website be exposed too?
SmartScanner can check your website for Machine-In-The-Middle in airtable and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability - CVE-2026-41265
- Prototype pollution vulnerability found in Mermaid's bundled version of DOMPurify - Vulnerability
- string-kit Inefficient Regular Expression Complexity vulnerability - CVE-2021-4299
- TypeORM: SQL Injection in UpdateQueryBuilder/SoftDeleteQueryBuilder orderBy (MySQL/MariaDB) - Vulnerability
You might also like:
See something that needs correcting? Let us knowUpdated January 09, 2023