New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

DoS vulnerability in global dependency #3858

Closed

TasiPeter opened this issue Apr 4, 2019 · 1 comment

Labels

area: node.js area: security

TasiPeter commented Apr 4, 2019

The version 6.0.2 is dependent on js-yaml version 3.12.0, which has a DoS vulnerability issue as stated here:

https://nodesecurity.io/advisories/788

Updating to version 3.13.0 should solve the problem.

juergba added area: node.js area: security labels

Member

juergba commented Apr 4, 2019

Thanks, please see #3845
This issue has already been fixed in current master and will be released with v6.1.0 shortly.

juergba closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment