GitHub Advisoryadvisory · npm

GHSA-jrj9-5qp6-2v8q Machine-In-The-Middle in airtable

HIGH Published 2020-09-03 Modified 2020-08-31 Official page ↗
Ecosystem
npm
Packages
airtable
Severity
High
Reviewed
2020-08-31

Affected packages

• npm airtable: >= 0.1.19, < 0.7.2 → fixed in 0.7.2

Description

Affected versions of `airtable` are vulnerable to Machine-In-The-Middle. The package has SSL certificate validation disabled by default unintentionally. This may allow attackers in a privileged network position to decrypt intercepted traffic. Recommendation Upgrade to version 0.7.2 or later.

References