Skip to content

Conversation

@krosenk729
Copy link
Contributor

Protecting package against vulnerabilities https://www.npmjs.com/advisories/606

Protecting package against vulnerabilities https://www.npmjs.com/advisories/606
@spanditcaa
Copy link

spanditcaa commented Oct 3, 2019

@arekinath - possible to merge this? Among others, Request depends this module and as a result many people (github says 3.4 million projects) are potentially exposed to the underlying vulnerability in sshpk. I believe it was your own commit to sshpk (69d24bc6b32c20584b317e7a88c05cc99a497bd9) that we are looking for.

Thanks.

@krosenk729
Copy link
Contributor Author

thanks @spanditcaa and @arekinath - let me know if there is anything else I can do

@spanditcaa
Copy link

see also #68, #80 -- @arekinath -- this resolves/supersedes those issues.

@spanditcaa
Copy link

@geek or anyone else at Joyent paying any attention to this repo?

@kusor kusor merged commit 2424e96 into TritonDataCenter:master Oct 30, 2019
@spanditcaa
Copy link

Thanks @kusor!

@spanditcaa
Copy link

@kusor - how about a version bump and npm publish?

@kusor
Copy link
Contributor

kusor commented Nov 5, 2019

@kusor - how about a version bump and npm publish?

Sounds about right due to #83 too.

dist-tags:
latest: 1.3.0

published just now by kusor

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants