nsp check fails due to vulnerability in tough-cookie dependency

[markgandy]

Vulnerability reported by https://nodesecurity.io/

Run:

nsp check

Current behaviour:

┌───────────────┬───────────────────────────────────────────────────────┐
│               │ ReDoS via long string of semicolons                   │
├───────────────┼───────────────────────────────────────────────────────┤
│ Name          │ tough-cookie                                          │
├───────────────┼───────────────────────────────────────────────────────┤
│ Installed     │ 2.2.2                                                 │
├───────────────┼───────────────────────────────────────────────────────┤
│ Vulnerable    │ >=0.9.7 <=2.2.2                                       │
├───────────────┼───────────────────────────────────────────────────────┤
│ Patched       │ >=2.3.0                                               │
├───────────────┼───────────────────────────────────────────────────────┤
│ Path          │ pusher@1.3.0 > request@2.67.0 > tough-cookie@2.2.2│
├───────────────┼───────────────────────────────────────────────────────┤
│ More Info     │ https://nodesecurity.io/advisories/130                │
└───────────────┴───────────────────────────────────────────────────────┘

Expected/desired behavior:

(+) No known vulnerabilities found

[felixfbecker]

This is a serious security vulnerability and is breaking or build, please fix it asap.
https://nodesecurity.io/advisories/130

[jackfranklin]

V 1.3.1 has this fix in.