Fix: Update saml and ejs dependencies - Githubissues

auth0 / node-samlp

SAML Protocol support for node (only IdP for now)

MIT License

136 stars 118 forks source link

Fix: Update saml and ejs dependencies #132

Closed madhuriravindramohan-okta closed 2 years ago

madhuriravindramohan-okta commented 2 years ago

Description

Updating the saml dependency to address CVE-2021-43138 and CVE-2022-24785.
Updating the ejs dependency to address CVE-2022-29078

References

https://nvd.nist.gov/vuln/detail/CVE-2021-43138 https://nvd.nist.gov/vuln/detail/CVE-2022-24785 https://nvd.nist.gov/vuln/detail/CVE-2022-29078

Testing

Verfied with npm run test

Checklist

[ ] I have added documentation for new/changed functionality in this PR or in auth0.com/docs
[x] All active GitHub checks for tests, formatting, and security are passing
[x] The correct base branch is being used, if not the default branch