#14 Add cached-path-relative dependency to avoid CVE-2018-16472

idealista · May 21, 2019 · 5b8ee90 · 5b8ee90
1 parent ff14b1a
commit 5b8ee90
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,7 +6,8 @@ This project adheres to [Semantic Versioning](http://semver.org/) and [Keep a ch
 
 ## [1.0.7](https://github.com/idealista/tlsh-js/tree/1.0.7)
 ### Fixed
-- *[#16](https://github.com/idealista/tlsh-js/pull/16)fixed build: users of your library should not need to install grunt* @dpoetzsch
+- *[#14](https://github.com/idealista/tlsh-js/issues/14) Update browserify due to CVE-2018-16472 in transitive dependency (cached-path-relative)* @jnogol
+- *[#16](https://github.com/idealista/tlsh-js/pull/16) fixed build: users of your library should not need to install grunt* @dpoetzsch
 
 ## [1.0.6](https://github.com/idealista/tlsh-js/tree/1.0.6)
 ### Changed

diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "tlsh",
-  "version": "1.0.6",
+  "version": "1.0.7",
   "description": "JavaScript port of TLSH (Trend Locality Sensitive Hash)",
   "main": "lib/tlsh.js",
   "author": "idealista <labs@idealista.com> (http://www.idealista.com/labs/blog/)",
@@ -22,6 +22,7 @@
     "grunt-contrib-jshint": "2.0.0",
     "grunt-mocha-test": "^0.12.7",
     "grunt-browserify": "^5.3.0",
+    "cached-path-relative": ">=1.0.2",
     "mocha": "5.2.0",
     "expect.js": "^0.3.1"
   },