Описание
constructEvent does not verify header
Impact
Anyone verifying a Stripe webhook request via this library's constructEvent function.
Patches
Upgrade to 1.1.4.
Workarounds
Use await verifyHeader(...) directly instead of constructEvent.
References
Пакеты
Наименование
@worker-tools/stripe-webhook
npm
Затронутые версииВерсия исправления
< 1.1.4
1.1.4