The version of request package being used here ("request": "<2.16.0") is vulnerable to remote memory exposure attack.
This has been patched up in later versions of request package.
Remediation is as simple as upgrading the dependency to version 2.68.0 or higher.
More information:
The version of
requestpackage being used here ("request": "<2.16.0") is vulnerable to remote memory exposure attack.This has been patched up in later versions of
requestpackage.Remediation is as simple as upgrading the dependency to version
2.68.0or higher.More information: