CVE Security issue

[dtiziani]

Version: 3.17.0

Code Snippet

$ npm i twilio
$ npm audit

Exception/Log

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate      │ Out-of-bounds Read                                           │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ stringstream                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ No patch available                                           │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ twilio                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ twilio > request > stringstream                              │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://nodesecurity.io/advisories/664                       │
└───────────────┴──────────────────────────────────────────────────────────────┘

Steps to Reproduce

1. npm i twilio
2. npm audit

[dkundel]

Thanks for raising this @dtiziani! I'll submit a PR to update the request dependency accordingly.

Cheers,
Dominik

[dkundel]

Hey @dtiziani,

The dependency has been fixed and @cjcodes will release a new version right now. Once that happened you should be good to upgrade. Thanks again for raising this!

Cheers,
Dominik