GitHub Advisoryadvisory · npm

GHSA-7543-mr7h-6v86 Improper Authorization in googleapis

HIGH Published 2020-09-02 Modified 2021-09-27 Official page ↗
Ecosystem
npm
Packages
googleapis
Severity
High
Weaknesses
CWE-285
Reviewed
2020-08-31

Affected packages

• npm googleapis: < 39.1.0 → fixed in 39.1.0

Description

Versions of `googleapis` prior to 39.1.0 are vulnerable to Improper Authorization. Setting credentials to one client may apply to all clients which may cause requests to be sent with the incorrect credentials. Recommendation Upgrade to version 39.1.0.

Related

Weakness · CWE (1)

  • CWE-285 Improper Authorization weakness

References