Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Possibly incorrect security status in VersionEye #67

Closed
crc442 opened this issue Aug 10, 2017 · 3 comments
Closed

Possibly incorrect security status in VersionEye #67

crc442 opened this issue Aug 10, 2017 · 3 comments

Comments

@crc442
Copy link

crc442 commented Aug 10, 2017

VersionEye still shows all versions of growl as vulnerable (https://www.versioneye.com/nodejs/growl/1.10.2), but I believe that is not true and the bug was fixed in > v1.9.3 (#62), right?
Is there anything we/I can do correct VersionEye? This is kinda breaking our builds.

@deiga
Copy link
Collaborator

deiga commented Aug 10, 2017

@crc442 Thanks for the heads up. It seems that the NSP advisory was still in effect. I submitted a request to take it down :)

@reiz
Copy link

reiz commented Aug 23, 2017

@crc442 @deiga For NodeJS projects VersionEye is getting the security data from NodeSecurity.io and Snyk.io. If it's fixed in their database it should be fixed in our database as well. But I will double check it today.

@reiz
Copy link

reiz commented Aug 23, 2017

@crc442 @deiga In the NodeSecurity.io database it's marked as solved for verison >=1.10.2. I updated our database with that. The newest version is green now: https://www.versioneye.com/nodejs/growl/1.10.2.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants