constructEvent does not verify header
Impact Anyone verifying a Stripe webhook request via this library's constructEvent function. Patches Upgrade to Workarounds Use await verifyHeader(…) directly instead of constructEvent. References https://github.com/worker-tools/stripe-webhook/issues/1