npm/npm-registry-fetch: medium 5.3

Sensitive information exposure through logs in npm-registry-fetch

Action: Upgrade npm-registry-fetch to 4.0.5 or later.

npm i npm-registry-fetch@4.0.5

npm i npm-registry-fetch@8.1.1

Affected

Fixed versions

Sources

• osv: GHSA-jmqm-f2gx-4fjv
• https://github.com/npm/npm-registry-fetch/security/advisories/GHSA-jmqm-f2gx-4fjv
• https://github.com/npm/npm-registry-fetch/pull/29
• https://github.com/npm/npm-registry-fetch/commit/18bf9b97fb1deecdba01ffb05580370846255c88
• https://github.com/npm/npm-registry-fetch
• https://snyk.io/vuln/SNYK-JS-NPMREGISTRYFETCH-575432

published 2020-07-07T18:59:10Z · modified 2021-09-22T19:00:07Z · JSON