`node-fetch`

Ecosystem:
npm

Package URL:
pkg:npm/node-fetch

Total PRs:
824 Dependabot PRs

Latest PR:
about 10 hours ago

Unique Repositories:
562 repositories

Unique Repos (30 days):
109 repositories

Security Advisories

The `size` option isn't honored after following a redirect in node-fetch

GHSA-w7rc-rwvf-8q5r CVE-2020-15168 LOW published almost 5 years ago • updated 3 months ago

### Impact Node Fetch did not honor the `size` option after following a redirect, which means that when a content size was over the limit, a `Fetch...

node-fetch Inefficient Regular Expression Complexity

GHSA-vp56-6g26-6827 CVE-2022-2596 MODERATE published about 3 years ago • updated about 1 month ago

[node-fetch](https://www.npmjs.com/package/node-fetch) is a light-weight module that brings window.fetch to node.js. Affected versions of this pac...

node-fetch forwards secure headers to untrusted sites

GHSA-r683-j2x4-v87g CVE-2022-0235 HIGH published over 3 years ago • updated about 1 month ago

node-fetch forwards secure headers such as `authorization`, `www-authenticate`, `cookie`, & `cookie2` when redirecting to a untrusted site.

Recent PRs

Bump node-fetch and firebase in /website

cartland/star-exploration #44

2.6.1 → 2.6.7 Patch PR

Merged about 10 hours ago

Bump node-fetch and @tensorflow/tfjs

mthorrell/FacePet #13

2.1.2 → 2.6.13 Minor PR

Open 1 day ago

Bump the npm_and_yarn group across 1 directory with 16 updates

sumonst21/ttag-cli #1

2.6.1 → 2.6.7 Patch PR

Open 2 days ago

Bump the npm_and_yarn group across 1 directory with 36 updates

hashim21223445/marktext #24

2.6.7 → 2.6.8 Patch PR

Open 3 days ago

Bump the npm_and_yarn group across 1 directory with 30 updates

MetaMask/walletkit #1

2.6.1 → 2.7.0 Minor PR

Open 3 days ago

Bump the npm_and_yarn group across 2 directories with 49 updates

MetaMask/web3connect #23

1.7.3 → 2.7.0 Major PR

Open 3 days ago 2 comments

build(deps): bump the npm_and_yarn group across 1 directory with 19 updates

MetaMask/saber-common #1

2.6.1 → 2.6.7 Patch PR

Open 3 days ago 2 comments

Bump the npm_and_yarn group across 2 directories with 51 updates

MetaMask/sol-wallet-adapter #15

2.6.0 → 2.7.0 Minor PR

Open 3 days ago

Bump the npm_and_yarn group across 1 directory with 25 updates

MetaMask/solana-redirect-react-native-sample #12

2.6.6 → 2.7.0 Minor PR

Open 3 days ago 1 comment

Bump node-fetch from 2.6.2 to 2.7.0 in /packages/opentelemetry

browserstack/appium-plugins #35

2.6.2 → 2.7.0 Minor PR

Open 4 days ago

chore(deps): bump node-fetch and puppeteer in /codeceptjs-example

browserstack/puppeteer-browserstack #34

removed Removal PR

Open 4 days ago

Bump the npm_and_yarn group across 1 directory with 25 updates

q1blue/responsible-ai-toolbox #1

2.6.1 → 2.6.7 Patch PR

Open 4 days ago

Bump node-fetch from 2.6.1 to 2.7.0

q1blue/riot-api-libraries #1

2.6.1 → 2.7.0 Minor PR

Open 4 days ago

build(deps): bump node-fetch from 2.6.12 to 2.7.0

Ephigenia/mite-cli #280

2.6.12 → 2.7.0 Minor PR

Open 5 days ago

[release-v1.19][npm]: Bump the major group across 5 directories with 37 updates

openshift-knative/backstage-plugins #742

2.7.0 → 3.3.2 Major PR

Open 6 days ago 1 comment

[release-v1.16][npm]: Bump the major group across 5 directories with 37 updates

openshift-knative/backstage-plugins #740

2.7.0 → 3.3.2 Major PR

Open 6 days ago 2 comments

[release-v1.15][npm]: Bump the major group across 5 directories with 37 updates

openshift-knative/backstage-plugins #735

2.7.0 → 3.3.2 Major PR

Open 6 days ago

[release-v1.17][npm]: Bump the major group across 5 directories with 37 updates

openshift-knative/backstage-plugins #733

2.7.0 → 3.3.2 Major PR

Open 6 days ago

Bump node-fetch and next

byhemechi/baals #6

2.6.1 → 2.6.7 Patch PR

Open 6 days ago

Bump node-fetch and next in /web

byhemechi/nextgame #8

2.6.1 → 2.6.7 Patch PR

Open 6 days ago

Bump node-fetch and next

byhemechi/secret-santa-frontend #6

removed Removal PR

Open 6 days ago

npm(deps): bump the production-dependencies group across 1 directory with 12 updates

Shiki0138/fleeksonline #22

2.7.0 → 3.3.2 Major PR

Open 7 days ago 1 comment

[yarn]: Bump the dependencies group across 1 directory with 58 updates

internet-identity-labs/nfid-wallet-client #2882

2.6.1 → 3.3.2 Major PR

Open 7 days ago 1 comment

chore(deps): bump node-fetch from 2.7.0 to 3.3.2

Natural-Bot/nb-whatsapp-web-lib #6

2.7.0 → 3.3.2 Major PR

Open 7 days ago

Bump the npm_and_yarn group across 1 directory with 4 updates

Ch0daboy/unstacklife #1

2.6.1 → 2.6.7 Patch PR

Open 8 days ago

Bump the npm_and_yarn group across 1 directory with 20 updates

Meketh/accounting-notebook-challenge #21

2.6.0 → 2.7.0 Minor PR

Open 8 days ago

Bump the npm_and_yarn group across 1 directory with 14 updates

hashim21223445/website #5

3.2.4 → 3.2.10 Patch PR

Open 8 days ago

Bump the npm_and_yarn group across 1 directory with 6 updates

sumit12690/next-ecommerce #1

2.6.1 → 2.6.7 Patch PR

Open 8 days ago

chore(deps): bump the production-dependencies group across 1 directory with 12 updates

ccbuildalot23/serenity-sober-pathways-guide #104

2.7.0 → 3.3.2 Major PR

Open 8 days ago 5 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 29 updates

pagerinc/s1ngularity-hcg9EU #44

2.6.1 → 2.7.0 Minor PR

Open 8 days ago

chore(deps): bump the npm_and_yarn group across 1 directory with 25 updates

pagerinc/s1ngularity-Iyta95 #5

2.6.1 → 2.7.0 Minor PR

Open 8 days ago

chore(deps): bump the npm_and_yarn group across 1 directory with 23 updates

pagerinc/s1ngularity-wghgfx #617

2.6.1 → 2.7.0 Minor PR

Open 8 days ago

build(deps): bump the npm_and_yarn group across 3 directories with 9 updates

hashim21223445/edge-runtime #18

2.6.11 → 3.3.2 Major PR

Open 9 days ago

Bump the npm_and_yarn group across 2 directories with 37 updates

sumit12690/next.js #12

2.6.1 → 2.6.7 Patch PR

Open 9 days ago

Bump the npm_and_yarn group across 10 directories with 32 updates

sumit12690/next.js #8

2.6.1 → 2.6.7 Patch PR

Open 9 days ago

Bump the npm_and_yarn group across 3 directories with 36 updates

sumit12690/next.js #7

2.6.1 → 2.6.7 Patch PR

Open 9 days ago

Bump the npm_and_yarn group across 7 directories with 35 updates

sumit12690/next.js #6

2.6.1 → 2.6.7 Patch PR

Open 9 days ago

Bump the npm_and_yarn group across 8 directories with 35 updates

sumit12690/next.js #4

2.6.1 → 2.6.7 Patch PR

Open 9 days ago

Bump the npm_and_yarn group across 5 directories with 36 updates

sumit12690/next.js #3

2.6.1 → 2.6.7 Patch PR

Closed 9 days ago 1 comment

Bump the npm_and_yarn group across 9 directories with 33 updates

sumit12690/next.js #2

2.6.1 → 2.6.7 Patch PR

Open 9 days ago

Bump the npm_and_yarn group across 2 directories with 36 updates

sumit12690/next.js #1

2.6.1 → 2.6.7 Patch PR

Closed 9 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 3 updates

Tehen1/Coach-AI #1

2.6.7 → 2.6.1

Merged 9 days ago

Bump the npm_and_yarn group across 3 directories with 32 updates

Centaurioun/jeed #12

2.6.1 → 2.7.0 Minor PR

Open 9 days ago 1 comment

chore(deps): bump node-fetch from 2.7.0 to 3.3.2

Vgshots/webjsrtest #7

2.7.0 → 3.3.2 Major PR

Closed 9 days ago

Bump the npm_and_yarn group across 1 directory with 44 updates

cbwinslow/cbw_workspace #1

1.7.3 → 2.7.0 Major PR

Open 9 days ago

[yarn]: Bump the dependencies group across 1 directory with 89 updates

internet-identity-labs/nfid-wallet-client #2880

2.6.1 → 3.3.2 Major PR

Open 10 days ago 1 comment

Bump node-fetch from 2.6.7 to 3.3.2 in /services/base

PropSwapLLC/propswap #1478

2.6.7 → 3.3.2 Major PR

Open 10 days ago

[npm]: Bump the dependencies group across 1 directory with 73 updates

internet-identity-labs/nfid-wallet-client #2878

2.6.1 → 3.3.2 Major PR

Closed 11 days ago 2 comments

deps: bump node-fetch from 2.6.6 to 3.3.2

VicAgudelo/vuln-demo #5

2.6.6 → 3.3.2 Major PR

Open 11 days ago

Bump the npm_and_yarn group across 1 directory with 38 updates

hashim21223445/marktext #19

2.6.7 → 3.3.2 Major PR

Closed 11 days ago 3 comments

Package Details

Name:	`node-fetch`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/node-fetch`
JSON API:	View JSON

Security Advisories

3

Active advisories

HIGH 1

MODERATE 1

LOW 1

View All npm Advisories

Package Information

Description:

A light-weight module that brings window.fetch to node.js

Repository:	https://github.com/bitinn/node-fetch
Homepage:	https://github.com/node-fetch/node-fetch
Latest Release:	`3.3.2` about 2 years ago
Dependent Repos:	1,817,321
Dependent Packages:	34,871
Downloads:	290,409,504
Ranking:	Top 0.0178% by dependent repos Top 0.0036% by downloads Top 0.0031% by dependent pkgs

PR Status

Open 473 (57.5%)

Merged 63 (7.7%)

Closed 173 (21.0%)

PR Types

Removal 15 (1.8%)

Minor 221 (26.9%)

Major 267 (32.4%)

Patch 160 (19.4%)