VulertSecurity VulertSecurity

Vulnerability Database · npm · Package report

@whatwg-node/node-fetch: vulnerability history, versions and safety

@whatwg-node/node-fetch is a package in the npm ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the npm ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all @whatwg-node/node-fetch vulnerabilities

Vulert verdict on @whatwg-node/node-fetch 0.9.2 i

Updated on 23 Oct 2026

Good news: 0.9.2, the version you would install today, has no known vulnerabilities.

Package health score 82/100
  • Security No known security issues
  • Maintenance Sustainable
  • Popularity Niche
  • Community Quiet

What to do: Stay on 0.9.2 or newer. This can change: a vulnerability disclosed tomorrow can affect 0.9.2 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release 0.9.2 — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 200 i
  • Last release this month i
  • Licence MIT i

Version list, release dates, licence and dependants published by the npm registry, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for @whatwg-node/node-fetch, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
0.9.2 22 Oct 2026 none MIT — Details →
0.9.2-alpha-20261022200228-179b366c8b6daa1f137540e47f94a6c1ee8ec53c 22 Oct 2026 none MIT — Details →
0.9.2-alpha-20261022195310-79276d4c67349b9bede0c66b123e112ed284070f 22 Oct 2026 none MIT — Details →
0.9.2-alpha-20261022195506-24f9ecea7fe23f6061f5a14c31c37a7b886f8e3c 22 Oct 2026 none MIT — Details →
0.9.2-alpha-20261022195244-9d95451e218ee93843e136a34dfd3120cb5a2305 22 Oct 2026 none MIT — Details →
0.9.2-alpha-20261022195126-8a9dc8dc2073f257a2e7c6c73c5b26ea8573864d 22 Oct 2026 none MIT — Details →
0.9.2-alpha-20261022194009-d97398d4775e3b2078711bacc55a33129bab05f6 22 Oct 2026 none MIT — Details →
0.9.2-alpha-20261021233409-a840bca0c5afb1f46007bf3de7eded105ef52a49 21 Oct 2026 none MIT — Details →
0.9.2-alpha-20261021223854-fe1cf2796099bb3625c9a2fae5a86b05f9cb5fc2 21 Oct 2026 none MIT — Details →
0.9.2-alpha-20261021090913-aa3ae1c18e8537323ebc614a1c929151f502aec0 21 Oct 2026 none MIT — Details →
0.9.2-alpha-20261020183249-4e48c968e9126dd5724f40ff7e051737e8fa70ea 20 Oct 2026 none MIT — Details →
0.9.2-alpha-20261019233918-6e53a7b07deb53342b0875f8b1e46af9583f2822 19 Oct 2026 none MIT — Details →
0.9.2-alpha-20261019233945-b1f197f147ccd806fc394574b8b3ffff736319f4 19 Oct 2026 none MIT — Details →
0.9.2-alpha-20261019135131-a58c1a8abd9b7e3d164ea26f678ab4a25f51c577 19 Oct 2026 none MIT — Details →
0.9.2-alpha-20261019113206-317b1c9a223553b5e2b38003ed2e11ac746efbc7 19 Oct 2026 none MIT — Details →
0.9.2-alpha-20261019015154-e8147b9f14cb0c24dddbe197a6854bc41c59b7a7 19 Oct 2026 none MIT — Details →
0.9.2-alpha-20261018215729-5cc4f637c73e70cfbaa35e6fbc00a6e6d229e3bf 18 Oct 2026 none MIT — Details →
0.9.2-alpha-20261018215626-a7aa41a1b8da216c4b5b7d3c8b4cbd5158c911cc 18 Oct 2026 none MIT — Details →
0.9.2-alpha-20261018175929-24d6256ed15e82f35584c1c29d6f44c72b8826ce 18 Oct 2026 none MIT — Details →
0.9.2-alpha-20261018005954-ca06223204ac910641d05f86037bd8fc500f5c4d 18 Oct 2026 none MIT — Details →
0.9.2-alpha-20261017201549-ded688e96f916dae27f0498239230c5981468173 17 Oct 2026 none MIT — Details →
0.9.2-alpha-20261017201601-affe7d96cd87756f07a10503b9a0d95d51f3465a 17 Oct 2026 none MIT — Details →
0.9.2-alpha-20261017185333-8bcce22c0cb1bca06269c6c86321d340ea2fe3e0 17 Oct 2026 none MIT — Details →
0.9.2-alpha-20261017185153-0c43e22ed5db64e225736e14c00a50b2a2e5c4ff 17 Oct 2026 none MIT — Details →
0.9.2-alpha-20261017185052-016ba57e631f5c07a24d6430d621ec380acbf14f 17 Oct 2026 none MIT — Details →
0.9.2-alpha-20261017142154-5104e3733faeb49da4d1a3ff171d5f55b03fc41c 17 Oct 2026 none MIT — Details →
0.10.0-alpha-20261016152556-c010d8f0d71d06c4adbe6a175d962956fddead77 16 Oct 2026 none MIT — Details →
0.10.0-alpha-20261016151244-4cedab2e8d6b215b17fcea2c7ce21d60ce92b119 16 Oct 2026 none MIT — Details →
0.9.1 30 Sep 2026 none MIT — Details →
0.9.1-rc-20260930212721-704975c3a29e2ac12b5fa09a53f1bbb7d4ccdf96 30 Sep 2026 none MIT — Details →
0.9.1-alpha-20260930212434-869b4e840fe28622979c1b9acd882daae8211c71 30 Sep 2026 none MIT — Details →
0.9.1-alpha-20260930212402-576001e0bb821789b8223b6d43bc8b7e80fafbed 30 Sep 2026 none MIT — Details →
0.9.1-alpha-20260930210111-261898a2f54322868598a0d13df35b4e11bac5de 30 Sep 2026 none MIT — Details →
0.9.1-alpha-20260930202731-a8b8ab7736ff0a1a71978953df9cfdfdfe800489 30 Sep 2026 none MIT — Details →
0.9.1-alpha-20260930192907-b286c923d0bf05d8e4a5cf1ef0a48e2dc87ad1e6 30 Sep 2026 none MIT — Details →
0.9.1-alpha-20260930192517-6b1351a940343f5c3da8ec9402df0817fc9fd6fc 30 Sep 2026 none MIT — Details →
0.9.1-alpha-20260930191353-e9929be6d39c3a6ff2def4bcac8da03426927748 30 Sep 2026 none MIT — Details →
0.9.1-alpha-20260930190100-bdb0eedac4a92d732907ac9157d504ed285d0b01 30 Sep 2026 none MIT — Details →
0.9.1-alpha-20260930181825-f539a4bc0320c1c7161d6fb8bd42617b372fe690 30 Sep 2026 none MIT — Details →
0.9.1-alpha-20260930174623-44be42e8fd40e19666cad580e790fface6fbff9a 30 Sep 2026 none MIT — Details →
0.9.1-alpha-20260930173819-d4b4c2574ec08b63a1a6eb53ee81f48f28728f1d 30 Sep 2026 none MIT — Details →
0.9.1-alpha-20260930170856-e0554e4b9806bdf7360f8f3ed10d98a0875a0347 30 Sep 2026 none MIT — Details →
0.9.1-alpha-20260930170601-909d77ba3438f139c03819ffac1ef4cdc3132484 30 Sep 2026 none MIT — Details →
0.9.1-alpha-20260930170448-23662510bbb8fabff632cdb635b4646435395a57 30 Sep 2026 none MIT — Details →
0.9.1-alpha-20260930170047-bafc30292825fddfc2e8add31b18bfaf520ffe28 30 Sep 2026 none MIT — Details →
0.9.1-alpha-20260930165846-18130b6d2abe7d0f274602e79ce5760d69e5cf8e 30 Sep 2026 none MIT — Details →
0.9.1-alpha-20260930165038-58426f0cc63c8f7b88b33e8ff37b5e78ade223e7 30 Sep 2026 none MIT — Details →
0.9.1-alpha-20260930164036-6ac578e21882cd494025d833b529eab38239c029 30 Sep 2026 none MIT — Details →
0.9.0 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921155350-f259ced36b30fa901acf8cc134d84476b18995ff 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921155404-4e912d52ebd7d8c6fa4ac85e209f04256acd42cc 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921151921-a915a3ca7671d88368fa952333e2f2da86721f43 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921151622-a9cf8ea8c8eab7747fc5c0d6b495bfc299ee67ae 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921151342-c8fdb2fc67c2c250ea1056810575c60c3b242a99 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921150047-3e9664e1d2f28d5190251ac200b20a6fa0e03f51 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921143022-d3960454d6b990010168fadcd8be75e2b1e8fe21 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921142850-a46d73f3d3450e1d64ab17d47397f0fbc957b611 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921142425-ae5e18acf98d58b79152eced3226942df4e71015 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921142208-c633e356bb307017d79b3dc3ede8a5e0e64b645c 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921142122-8396e74e31ef5bc5dbebf695b4df3e8734298932 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921141034-1df27a9909a25ef1258093a5b25cd4f2bce7a140 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921140900-8abdea3808e08957a969ee20fb36f22b742436ca 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921135758-1c1e52a3b89a8db1f49979df86dea48c1094c1cb 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921135344-636508b5058bb55184ae04ec2c7be05595868b41 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921135632-d455d10eec8f65dea5e380b91dcaaa569262a10e 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921134334-39a54ddaedb89b0a9f72dd45925bfbd0eef41f8c 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921133738-014454c3c66fc5b1cda192077600af5ff8c78613 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921132603-30a1ab2f1ae3de3e2a481acff4cad7c9e12fce9a 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921132557-cc04611f47c6dfa0d3adab977c864f3de7f2b96b 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921131941-ea9cc70415b54e131bab30514274baf556f6f1fa 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921130336-da22cff331495c99059fe7b4a9718f1da65dc13e 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921125757-34fa934fcba14f34c7b38029b50aff260ee56da5 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921125928-0f7de88fcd21f374130f6cb72a2adf245b9bea8a 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921125317-3709685d3af47c55325482f9e918a635ee0ae7a1 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921121907-4dcfa3dfed4631ed04bccf2b887bdfbfc1637e87 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921121228-6951ee3947b82c04d4a7d28763be1e05494dd24b 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921121004-d3009ef78a28c490c751b3fa5a223cc4dddaaba0 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921120829-953be1ba805992730bb868e06f5473882a24b2e8 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921120659-0bc144eb8baae5ebe49f9935e8a1718758218b25 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921021718-001449f594087288a290d3f89c5c539e7fd08b14 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260921021525-a118397587d8a77d69241fd91dd9583c93c67bb9 21 Sep 2026 none MIT — Details →
0.9.0-alpha-20260920172446-f1e89c18f42fa674a1b3816bbfb2d509d9556a31 20 Sep 2026 none MIT — Details →
0.9.0-alpha-20260920154411-91f7e0a98820944bf532f100d544c24bdaba5d7f 20 Sep 2026 none MIT — Details →
0.9.0-alpha-20260920133717-acc4900d2807977fe674b49f1bfb0bd9724c467d 20 Sep 2026 none MIT — Details →
0.9.0-alpha-20260920131622-c315cda54f47b661ecb4a997755c04056e7f139f 20 Sep 2026 none MIT — Details →
0.9.0-alpha-20260920131133-a7d8b777d125de2d39ae5f7ded2a971fa5d6bd92 20 Sep 2026 none MIT — Details →
0.9.0-alpha-20260920130935-a3b7e6bde7f92afef4648521daa55c6e4884fc79 20 Sep 2026 none MIT — Details →
0.9.0-alpha-20260920130808-d1604a17012df82ab94f17c429a9ebc7de0c54d3 20 Sep 2026 none MIT — Details →
0.9.0-alpha-20260920130000-c8eda2b6056ff2f3dcd32d462a4a666dec89ce8e 20 Sep 2026 none MIT — Details →
0.9.0-alpha-20260920125951-1dda28d9aa09a836ca5d8291611fe0a35954cfee 20 Sep 2026 none MIT — Details →
0.9.0-alpha-20260920125722-c0023682827c62610bf77b49e38232425161d568 20 Sep 2026 none MIT — Details →
0.9.0-alpha-20260920125833-7ffa3001a4c4d63f8b292929e4d644e9401c294f 20 Sep 2026 none MIT — Details →
0.9.0-alpha-20260920123757-21829705b2969c621dffd1c4374e226ec434707b 20 Sep 2026 none MIT — Details →
0.9.0-alpha-20260920103709-c3a57e04e13108758596734779ac2dbdc27061df 20 Sep 2026 none MIT — Details →
0.9.0-alpha-20260920103533-9851cd1da1995e600a15524318e30ce48a038e48 20 Sep 2026 none MIT — Details →
0.9.0-alpha-20260920102802-3e74ff661d452d6cc154382a7b1b5cd321b9b49f 20 Sep 2026 none MIT — Details →
0.9.0-alpha-20260920090633-544477aa2d7f22115a398c19760e745bd14c57fe 20 Sep 2026 none MIT — Details →
0.9.0-alpha-20260919213452-2d1a1d599e0d7cea7c3f8cd702385518e65ff9b7 19 Sep 2026 none MIT — Details →
0.9.0-alpha-20260919084551-9030196019038f99cfaeb34d4f3c52ce1a49c9b0 19 Sep 2026 none MIT — Details →
0.9.0-alpha-20260918234338-75f0692dce170666c6f12d9b08d92f6350c13960 18 Sep 2026 none MIT — Details →
0.9.0-alpha-20260918033233-a3119819762529a85fa7888677c880fdd2f20564 18 Sep 2026 none — — Details →
0.9.0-alpha-20260917232412-94d6a16cfa997106466aeccfaaafed7c42eeec05 17 Sep 2026 none — — Details →
0.9.0-alpha-20260917215019-a98c52b813f758db867d64b6ca2f48df9ea253e4 17 Sep 2026 none — — Details →
0.9.0-alpha-20260917183334-5ec7981f17e135aed0b5f0946afc183d5862af8f 17 Sep 2026 none — — Details →
0.9.0-alpha-20260917183002-330fb6b8f1f76e02870dcf92ef5d332fe5618475 17 Sep 2026 none — — Details →
0.9.0-alpha-20260917182817-ed9e74ccb0f2f4946fd46e53ea0f59d400bc1dcd 17 Sep 2026 none — — Details →
0.9.0-alpha-20260917180955-4cfbc328088beaa93a05a72883e21d011e82b6d5 17 Sep 2026 none — — Details →
0.9.0-alpha-20260917180950-1cf3e807164a42427efd8e2d30c5a55dcc68ee78 17 Sep 2026 none — — Details →
0.9.0-alpha-20260917174419-daea075632fa5d548d74da3523a417c9e53ba6d3 17 Sep 2026 none — — Details →
0.9.0-alpha-20260917174601-f9da724e8821fc7836574d1a13181e14e3010cbd 17 Sep 2026 none — — Details →
0.9.0-alpha-20260917170706-1291b418116fa788f8369f57661ff01c2c1796b1 17 Sep 2026 none — — Details →
0.9.0-alpha-20260917170118-49adf812d886e2cba91a7861041430513d38836a 17 Sep 2026 none — — Details →
0.9.0-alpha-20260917162611-64f6d57184be2ed55f77a5081db5a499760ecf7c 17 Sep 2026 none — — Details →
0.9.0-alpha-20260917152125-7785f6d96054aa9019da5082b91245984d9fab55 17 Sep 2026 none — — Details →
0.9.0-alpha-20260917151718-38c9f4df4f3c63aa3e25781785885122cd9aa700 17 Sep 2026 none — — Details →
0.9.0-alpha-20260917151933-cf315491a77081163d887ceb79e6a113a7165194 17 Sep 2026 none — — Details →
0.9.0-alpha-20260917151413-5bdf422aa3ba9ed5b6a810cf7f27091469e973b8 17 Sep 2026 none — — Details →
0.9.0-alpha-20260917150747-1d2fdd77927b87ab7e1847fe3dfd2bfa960c2254 17 Sep 2026 none — — Details →
0.9.0-alpha-20260917150445-ab11ed9375b465e0f429c56e69840345a5a2df06 17 Sep 2026 none — — Details →
0.9.0-alpha-20260917130238-d3f9f476cc2e7eaf2b7dce4852b0ad0616b2e0b9 17 Sep 2026 none — — Details →

The newest 120 of 1,406 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for @whatwg-node/node-fetch

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About @whatwg-node/node-fetch

Is @whatwg-node/node-fetch safe to use?

Vulert has no vulnerabilities on record for @whatwg-node/node-fetch in npm at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is @whatwg-node/node-fetch's Vulert package health score?

Vulert scores @whatwg-node/node-fetch 82/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of @whatwg-node/node-fetch affected?

No. 0.9.2, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

How many vulnerabilities does @whatwg-node/node-fetch have?

0 vulnerabilities are recorded for @whatwg-node/node-fetch in the npm ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new @whatwg-node/node-fetch vulnerabilities disclosed?

0 vulnerabilities were recorded for @whatwg-node/node-fetch in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of @whatwg-node/node-fetch are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor @whatwg-node/node-fetch for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the @whatwg-node/node-fetch version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.