New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[security] Prototype pollution #205

Closed

dcaillibaud opened this issue Mar 28, 2018 · 1 comment

dcaillibaud commented Mar 28, 2018

Hello,

Snyk report a low security issue in fsevents@1.1.3, due to node-pre-gyp@0.6.39 usage
https://snyk.io/test/npm/fsevents/1.1.3?severity=high&severity=medium&severity=low

Is node-pre-gyp@0.6.39 could be updated to node-pre-gyp@0.9.0 where the issue is fixed
https://snyk.io/test/npm/node-pre-gyp/0.9.0?severity=high&severity=medium&severity=low
?
(issue was already fixed in node-pre-gyp@0.7.0 and node-pre-gyp@0.8.0)

Thanks

Contributor

bnoordhuis commented Mar 28, 2018

Duplicate of #198 and others. Will be fixed in the next release but it's basically a non-issue.

bnoordhuis closed this as completed

rwjblue mentioned this issue

Publish new version resolving deep-extend vulnerability? #222

Closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment