Simplified HTTP request client.
15%
Total Score
critical
The package is deprecated, with no releases in over six years and no commits in the last three months.
The registry marks the entire package as deprecated and provides no replacement package. This directly indicates that new projects should not adopt the release.
The package has had no releases in over six years, despite a historically active release cadence. That strongly indicates abandonment for dependency adoption.
The repository recorded zero commits and zero active maintainers in the last three months. The unarchived repository does not compensate for the lack of current development activity.
| Title | Versions | Severity |
|---|---|---|
CVE-2023-28155 request is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.0 - 2.88.2. | 0.0.0 - 2.88.2 | Medium |
CVE-2017-16026 request is vulnerable to Insertion of Sensitive Information Into Sent Data in versions 2.49.0 - 2.68.0 and 2.2.6 - 2.47.0. | 2.2.6 - 2.47.02.49.0 - 2.68.0 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
qs Version ~6.5.2 | — | — |
aws4 Version ^1.8.0 | — | — |
uuid Version ^3.3.2 | — | — |
extend Version ~3.0.2 | — | — |
caseless Version ~0.12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.