TomFrost / Bristol

Insanely configurable logging for Node.js
MIT License
113 stars 19 forks source link

Moment.js vulnerability #50

Closed marcelcremer closed 6 years ago

marcelcremer commented 6 years ago

Hi,

I've just ran a vulnerability scan on my app and got a known vulnerability for moment.js in 2.5.1:

https://nodesecurity.io/advisories/55

As moment didn't have any breaking changes, I'd propose to update moment dependency to latest 2.22.1.

Cheers Marcel

marcelcremer commented 6 years ago

@TomFrost are you still with us? :-)