search

AlexDaSoul / nestjs-proto-gen-ts

Generate TypeScript interfaces for Nest.js gRPC from Protobuf files
MIT License
74 stars 28 forks source link

Bump vulnerable protobufjs dependency #30

Closed pumano closed 2 years ago

pumano commented 2 years ago

Bug Report

protobufjs 6.10.0 - 6.10.2 Severity: high Prototype Pollution in protobufjs - https://github.com/advisories/GHSA-g954-5hwp-pp24 fix available via npm audit fix _nodemodules/protobufjs

└─┬ nestjs-proto-gen-ts@1.0.20
  └── protobufjs@6.10.2

Possible Solution

update protobufjs to 6.11.3+

AlexDaSoul commented 2 years ago

Done