search

alanshaw / david-www

:eyeglasses: David helps keep your Node.js project dependencies up to date.
https://david-dm.org
MIT License
730 stars 131 forks source link

Incorrectly reporting package vulnerability for patched version of moment.js #391

Closed chronosis closed 6 years ago

chronosis commented 6 years ago

David is currently incorrectly reporting package vulnerabilities for moment.js version 2.19.3 For example: https://david-dm.org/MediaXPost/logstash-relay

However, the Node Security Advisory specifically states that this only impacts versions <2.19.3

alanshaw commented 6 years ago

Probably the same thing as this: https://github.com/alanshaw/david-www/issues/389#issuecomment-339274960

Fixed now