CVE-2020-7720 : Prototype Pollution in node-forge

SAFE-Stack / SAFE-template

dotnet CLI template for SAFE project

MIT License

283 stars 88 forks source link

CVE-2020-7720 : Prototype Pollution in node-forge #406

Closed travis-leith closed 3 years ago

travis-leith commented 3 years ago

Github has kindly informed me that my project has "1 node-forge vulnerability found in sales_entry/package-lock.json". See: https://github.com/advisories/GHSA-92xj-mqp7-vmcj

The dependency chain that leads to this is webpack-dev-server -> selfsigned -> node-forge

I see that this isn't the first time that node-forge has had a vulnerability. Is this something I can fix myself or do I need to wait for a new webpack-dev-server version?

theimowski commented 3 years ago

Hi @travis-leith you can solve that issue e.g. by using npm audit

theimowski commented 3 years ago

See #408