Depends a vulnerable version of hoek

akanass / rx-otp

HMAC-based (HOTP) and Time-based (TOTP) One-Time Password manager. Works with Google Authenticator for Two-Factor Authentication.

MIT License

76 stars 9 forks source link

Depends a vulnerable version of hoek #6

Closed daankets closed 6 years ago

daankets commented 6 years ago

Depends on otp.js@1.1.0 > joi@7.3.0 > topo@2.0.2 > hoek@4.2.0. This version has a known vulnerability: https://nodesecurity.io/advisories/566. You can fix this by using a more recent version of joi.

akanass commented 6 years ago

This library is in progress to be rewritten with latest version of all dependencies and RxJS for processing