request

2.88.2 · 11 Feb 2020Apache-2.07.1M / weekRepository Homepage npm Atom feed

Deprecated by its maintainers: request has been deprecated, see https://github.com/request/request/issues/3142What to use instead

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Paste your package.json, or type the range you declare for request. It is read in your browser and sent nowhere.

Line	Newest	Where it stands
	2.88.2	1 open advisory, worst moderate
	1.9.9	4 open advisories, worst moderate · last release Jul 2011, no longer updated

Your version

Moderate
Server-Side Request Forgery in RequestGHSA-p8p7-x288-28g6 · 16 Mar 2023
- 2.x2.0.0 – 2.88.2No fix on 2.x
- 1.x and older0.8.3 – 1.9.9No fix, no longer updated
Moderate
Remote Memory Exposure in requestGHSA-7xfp-9c55-5vqj · 9 Nov 2018
- 2.x2.2.6 – 2.67.0Fixed in 2.68.0

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 21 Oct 2026. Releases and advisories last read 21 Oct 2026.