Skip to content

Request node-forge version up #138

@gaiuszzang

Description

@gaiuszzang

Hello, I got the github issue report that node-forge in adbkit needs to version up due to follow.

CVE-2020-7720
Vulnerable versions: < 0.10.0
Patched version: 0.10.0
The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions.

Please update the node-forge version 0.10.0 or later.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions