coolaj86/telebit.js
1
2
Fork 1
Code Issues 46 Pull Requests 2 Releases Activity

npm audit found some vulnerabilities #22

New Issue
Closed
opened 2018-11-10 15:34:25 +00:00 by Ghost · 1 comment
Ghost commented 2018-11-10 15:34:25 +00:00
Copy Link
                                                                                
                       === npm audit security report ===                        
                                                                                
# Run  npm install jsonwebtoken@8.3.0  to resolve 2 vulnerabilities
SEMVER WARNING: Recommended action is a potentially breaking change
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate      │ Prototype pollution                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ hoek                                                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ jsonwebtoken                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ jsonwebtoken > joi > hoek                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://nodesecurity.io/advisories/566                       │
└───────────────┴──────────────────────────────────────────────────────────────┘


┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate      │ Prototype pollution                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ hoek                                                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ jsonwebtoken                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ jsonwebtoken > joi > topo > hoek                             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://nodesecurity.io/advisories/566                       │
└───────────────┴──────────────────────────────────────────────────────────────┘


found 2 moderate severity vulnerabilities in 187 scanned packages
  2 vulnerabilities require semver-major dependency updates.
``` === npm audit security report === # Run npm install jsonwebtoken@8.3.0 to resolve 2 vulnerabilities SEMVER WARNING: Recommended action is a potentially breaking change ┌───────────────┬──────────────────────────────────────────────────────────────┐ │ Moderate │ Prototype pollution │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Package │ hoek │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Dependency of │ jsonwebtoken │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Path │ jsonwebtoken > joi > hoek │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ More info │ https://nodesecurity.io/advisories/566 │ └───────────────┴──────────────────────────────────────────────────────────────┘ ┌───────────────┬──────────────────────────────────────────────────────────────┐ │ Moderate │ Prototype pollution │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Package │ hoek │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Dependency of │ jsonwebtoken │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Path │ jsonwebtoken > joi > topo > hoek │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ More info │ https://nodesecurity.io/advisories/566 │ └───────────────┴──────────────────────────────────────────────────────────────┘ found 2 moderate severity vulnerabilities in 187 scanned packages 2 vulnerabilities require semver-major dependency updates. ```
coolaj86 commented 2019-05-14 05:55:56 +00:00
Owner
Copy Link

These are taken care of in the next branch.

Those particular vulnerabilities do not affect the code in master, as is.

These are taken care of in the `next` branch. Those particular vulnerabilities do not affect the code in `master`, as is.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
feature
something new that would be great to add
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
josh jshaver ryanburnette coolaj86
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: coolaj86/telebit.js#22
No description provided.
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?