Skip to content

Commit 277aab5

Browse files
authored
[Security] Upgrade node-forge to 0.10.0 (#292)
node-forge < `0.10.0` has a prototype pollution vulnerability. this issue is resolved in 0.10.0. Note that Node.js 4 no longer supported with this version. See: https://snyk.io/vuln/SNYK-JS-NODEFORGE-598677 https://github.com/digitalbazaar/forge/blob/master/CHANGELOG.md#0100---2020-09-01
1 parent 003ef1c commit 277aab5

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@
4040
"es6-promise": "^4.2.8",
4141
"lodash": "^4.17.15",
4242
"long": "^4.0.0",
43-
"node-forge": "^0.8.5",
43+
"node-forge": "^0.10.0",
4444
"pako": "^1.0.11",
4545
"process": "^0.11.10",
4646
"uuid": "^3.3.3"

0 commit comments

Comments
 (0)