Is node-fetch 3.2 vulnerable?
npm · 11 releases from 3.2.0 to 3.2.10 · latest node-fetch is 3.3.2 · checked 1 Nov 2026
No known advisories in the last release
node-fetch 3.2.10, the last 3.2 release, has no known advisories. 1 advisory affects earlier 3.2.x releases, so update to 3.2.10.
Update within 3.2:
npm install node-fetch@3.2.10Fixed within 3.2.x, affecting earlier releases
node-fetch Inefficient Regular Expression Complexity
- Affected
- >=3.0.0 <3.2.10
- Fixed in
- 3.2.10
Which of your client projects are still on node-fetch 3.2?
NPMscan reads the lockfiles in every GitHub repo you pick, finds the exact node-fetch version each one installs, and checks it against these advisories. Each finding comes with the command that fixes it.
Other node-fetch versions
Advisory data from OSV.dev (opens OSV.dev in a new tab), which includes the GitHub Advisory Database. Release list from the npm registry. Refreshed daily.