docs: mailgun-js is deprecated and has security vulnerabilities. Please update your guides.
See original GitHub issueI’m posting this here because it’s relevant, although the issue is not with this library.
Your official Mailgun documentation for NodeJS implementation (https://documentation.mailgun.com/en/latest/user_manual.html?highlight=batch sending#sending-via-api) refers to a deprecated dependency mailgun-js
.
The deprecated package mailgun-js
has a High security vulnerability in one of it’s sub-dependencies which cannot be auto fixable.
Please update your guides to use examples with this library.
Issue Analytics
- State:
- Created 2 years ago
- Reactions:20
- Comments:9 (3 by maintainers)
Top Results From Across the Web
docs: mailgun-js is deprecated and has security vulnerabilities ...
The deprecated package mailgun-js has a High security vulnerability in one of it's sub-dependencies which cannot be auto fixable.
Read more >mailgun-js - npm Package Health Analysis - Snyk
Learn more about mailgun-js: package health score, popularity, security, ... Snyk scans all the packages in your projects for vulnerabilities and provides ...
Read more >TLS Version 1.0 and 1.1 Deprecation - Mailgun
Why deprecate TLS 1.0 and 1.1? The older TLS versions are riddled with security vulnerabilities. As such, these protocols are updated over time ......
Read more >Cannot Install Ghost on Plesk Obsidian with Nods.js
I want to install Ghost CMS for a domain hosted on my plesk server. ... for details. npm WARN deprecated node-pre-gyp@0.11.0: Please upgrade...
Read more >Open-source Attributions
New Relic will have no liability to you for direct, indirect, consequential ... a copy of this software and associated documentation files (the...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
@MrSwitch Good catch. Thank you. There were a bunch of open issues that pointed to vulnerability in the deprecated mailgun-js library. Accidentally I decided that this is one of them.
Yes, we should be using the official
mailgun.js
package instead: https://github.com/mailgun/mailgun-js/issues/122