npm/phin: medium 4.3
phin may include sensitive headers in subsequent requests after redirect
Action: Upgrade phin to 3.7.1 or later.
npm i phin@3.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.7.1 | - |
Fixed versions
| 3.7.1 |
Sources
- osv: GHSA-x565-32qp-m3vf
- https://github.com/ethanent/phin/security/advisories/GHSA-x565-32qp-m3vf
- https://github.com/ethanent/phin/commit/c071f95336a987dad9332fd388adeb249925cc57
- https://github.com/ethanent/phin
published · modified · JSON