Skip to content
OpenAdvisories
High · 8.1 CVE-2021-21421 EUVD-2021-0889GHSA-xw22-wv29-3299

ApiKey secret could be revelated on network issue

Published Apr 1, 2021 · Updated Aug 3, 2024 · Assigned by GitHub_M

Description

node-etsy-client is a NodeJs Etsy ReST API Client. Applications that are using node-etsy-client and reporting client error to the end user will offer api key value too This is fixed in node-etsy-client v0.3.0 and later.

Affected products

VendorProductAffectedFixed
creharmony node-etsy-client < 0.3.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm node-etsy-client < 0.3.0 0.3.0 GHSA-xw22-wv29-3299

References