Description
Affected versions of airtable are vulnerable to Machine-In-The-Middle. The package has SSL certificate validation disabled by default unintentionally. This may allow attackers in a privileged network position to decrypt intercepted traffic.
Recommendation
Update the airtable package to the latest compatible version. Followings are version details:
- Affected version(s): >= 0.1.19, < 0.7.2
- Patched version(s): 0.7.2
References
Related Issues
- Cross-site Scripting in jquery-ui - CVE-2010-5312
- nuxt Code Injection vulnerability - CVE-2023-3224
- QooxDoo XSS in Callback Parameter - CVE-2011-1714
- Denial of Service in ipfs-bitswap - Vulnerability
- Tags:
- npm
- airtable
Anything's wrong? Let us know Last updated on January 09, 2023