Fixed url-parse vulnerability. See https://github.com/unshiftio/url-p…

…arse/blob/master/SECURITY.md#history > url-parse returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass Authentication Protocol.
alallier · Aug 7, 2018 · 97accb7 · 97accb7
1 parent 58cc9ae
commit 97accb7
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 10 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -26,7 +26,7 @@
     "opn": "^5.3.0",
     "serve-static": "~1.13.2",
     "supervisor": "~0.12.0",
-    "url-parse": "~1.1.9",
+    "url-parse": "~1.4.3",
     "ws": "~5.2.0"
   },
   "devDependencies": {