Major security issues - Githubissues

MadisonReed / usps-webtools

USPS Web Tools API wrapper

42 stars 37 forks source link

Major security issues #23

Closed BrandonCopley closed 8 years ago

BrandonCopley commented 8 years ago

There are a few major security issues I found with this package that are super easy to fix:

qs needs to be upgraded to above 1.0.0 (1.0.0 and below are affected) request needs to be upgraded to 2.78.0 hawk needs to be upgraded as well

BrandonCopley commented 8 years ago

Anything I can do to update this? - I can pull request it or I can help get this tested and pushed up to NPM. These issues should be fixed soon I believe.

divesnob commented 8 years ago

thanks @BrandonCopley - feel free to create a PR and we'll loop it in.

BrandonCopley commented 8 years ago

I have just created the PR.

divesnob commented 8 years ago

Addressed issue and pushed 0.2.1 up to npm.