Skip to content

Commit adcfd6a

Browse files
dominykasziluvatar
authored andcommittedMay 17, 2017
bump ms to v2 due a ReDoS vuln (#352)
ms@0.7.3 is vulnerable to a ReDoS attack: https://snyk.io/vuln/npm:ms:20170412 Looking at the code, the breaking change in ms@2.x that the accepted string is now limited to 100 chars.
1 parent 6755049 commit adcfd6a

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed
 

‎package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@
2222
"joi": "^6.10.1",
2323
"jws": "^3.1.4",
2424
"lodash.once": "^4.0.0",
25-
"ms": "^0.7.1",
25+
"ms": "^2.0.0",
2626
"xtend": "^4.0.1"
2727
},
2828
"devDependencies": {

0 commit comments

Comments
 (0)
Please sign in to comment.