botbuilder-adapter-twilio-whatsapp Security Vulnerability

BotBuilderCommunity / botbuilder-community-js

Part of the Bot Builder Community Project. Repository for extensions for the Bot Builder JavaScript SDK, including middleware, dialogs, recognizers and more.

MIT License

118 stars 38 forks source link

botbuilder-adapter-twilio-whatsapp Security Vulnerability #382

Open guy-microsoft opened 1 year ago

guy-microsoft commented 1 year ago

Package uses twillio 3.84.1 which includes vulnerability that has already been fixed in version 4.7.1. Should update the dependency accordingly.

iMicknl commented 1 year ago

@guy-microsoft would you be willing to do a PR to fix this?

Perhaps it would be good to archive this repository anyway, since no one is maintaining this repository anymore. :)

guy-microsoft commented 1 year ago

Since it seems that this repo is deprecated, I think I won't use it. New security issues may arise in the future.