Upgrading node-fetch 1 to 2
Unknown1.7.3 → 2.7.0Security2New1Changed1Fixed9
Fetching 33 releases from GitHub…13 / 33
SecurityHigh · CVSS 8.8node-fetch forwards secure headers to untrusted sitesGHSA-r683-j2x4-v87g · CVE-2022-0235 ↗
UnknownUpgrade verdict
DepDelta is still reading the notes for 20 of 33 releases, so breaking changes can't be ruled out yet.
In plain terms
- DepDelta is still reading the release notes in this range, so it can't rule out breaking changes yet.
- This page updates as the notes come in.
Must act 1 item needs code or config changes
Requires Node.js 4.x || >=6.0.0 from 2.0.0-alpha.7 (none stated before).
Adds whatwg-url ^5.0.0.
Drops encoding, is-stream.
Installs 3 packages in all (was 4).
What you must change
Security1
node-fetch forwards secure headers to untrusted sites
High · CVSS 8.8