Machine-In-The-Middle in airtable

Description

Affected versions of airtable are vulnerable to Machine-In-The-Middle. The package has SSL certificate validation disabled by default unintentionally. This may allow attackers in a privileged network position to decrypt intercepted traffic.

Recommendation

Update the airtable package to the latest compatible version. Followings are version details:

• Affected version(s): >= 0.1.19, < 0.7.2
• Patched version(s): 0.7.2

References

• GHSA-jrj9-5qp6-2v8q
• www.npmjs.com

Related Issues

• Server secret was included in static assets and served to clients - Vulnerability
• Redwood is vulnerable to account takeover via dbAuth "forgot-password - Vulnerability
• jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch - CVE-2026-24001
• Incorrect default cookie name and recommendation - Vulnerability

Tags:

npm

airtable