From b9af9495dc6aeed0ca55a853d7ac925dc025e6dd Mon Sep 17 00:00:00 2001 From: Paul Miller Date: Fri, 5 Aug 2016 21:02:01 +0300 Subject: [PATCH] SECURITY ISSUE: Resolve minimatch DDOS issue. `browserify@10.1.3` depends on `glob@4.5.3`; which depends on `minimatch@2.0.10`. Every installation of the minimatch outputs this to every user machine: >npm WARN deprecated minimatch@2.0.10: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue And this is still a RegExp DoS issue. --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 85fa41360..217c869fe 100644 --- a/package.json +++ b/package.json @@ -72,7 +72,7 @@ "open": "0.0.5" }, "dependencies": { - "browserify": "10.1.3" + "browserify": "13.1.0" }, "cordova-platforms" : { "cordova-android" : "../cordova-android",