New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NSP Security check errors #2008

Open
KevinHaisol opened this Issue Oct 9, 2017 · 2 comments

Comments

Projects
None yet
2 participants
@KevinHaisol

KevinHaisol commented Oct 9, 2017

When running nsp security checks on the latest version of yui@3.18.1 I get the following errors. Can you update the dependency packages specified?

Looks like the issue is in request@2.40.0, I'll check with that repo and get back...

@KevinHaisol KevinHaisol reopened this Oct 10, 2017

@KevinHaisol

This comment has been minimized.

Show comment
Hide comment
@KevinHaisol

KevinHaisol Oct 10, 2017

Can you upgrade the node-module package request to request@v2.83.1. This might resolve some fo the vulnerabilities found at: https://expressjs.com/en/advanced/best-practice-security.html

KevinHaisol commented Oct 10, 2017

Can you upgrade the node-module package request to request@v2.83.1. This might resolve some fo the vulnerabilities found at: https://expressjs.com/en/advanced/best-practice-security.html

@pflannery

This comment has been minimized.

Show comment
Hide comment
@pflannery

pflannery May 7, 2018

This package also leads to this warning on github

image

pflannery commented May 7, 2018

This package also leads to this warning on github

image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment