Affected versions of airtable are vulnerable to Machine-In-The-Middle. The package has SSL certificate validation disabled by default unintentionally. This may allow attackers in a privileged network position to decrypt intercepted traffic.

Recommendation

Upgrade to version 0.7.2 or later.

References

• https://www.npmjs.com/advisories/1305