fix!: remove vulnerable node-forge dependency - Githubissues

auth0 / node-saml

SAML assertion creation for node

MIT License

70 stars 91 forks source link

fix!: remove vulnerable node-forge dependency #81

Closed david-renaud-okta closed 2 years ago

david-renaud-okta commented 2 years ago

Description

Upgraded the xml-encryption package which removes the vulnerable node-forge dependency

References

https://github.com/advisories/GHSA-8fr3-hfg3-gpgp

Testing

All existing tests pass

Checklist

[x] I have added documentation for new/changed functionality in this PR or in auth0.com/docs
[x] All active GitHub checks for tests, formatting, and security are passing
[x] The correct base branch is being used, if not master