search

Medium / phantomjs

NPM wrapper for installing phantomjs
Other
1.42k stars 436 forks source link

Update extract-zip dependency #719

Open kevinbror opened 7 years ago

kevinbror commented 7 years ago

The extract-zip dependency has version 1.5.0 of concat-stream as a dependency. That has a known uninitialized memory exposure vulnerability: https://snyk.io/vuln/npm:concat-stream:20160901. Can that be updated to > 1.5.2 where that is resolved?