Closed VarunWachaspati closed 6 months ago
Raised a PR to address the above issue - https://github.com/box/box-node-sdk/pull/874. Kindly take a look at this whenever possible.
Hi @VarunWachaspati
Thanks for your PR, this fix will included in the next release.
Bests, Minh
Hey @congminh1254
Thanks for merging the PR. Any idea when the next release would be done?
Hi @VarunWachaspati
We have just released the version 3.5.0 of box-node-sdk
.
Please check it, if you need anything else, let us know.
Description of the Issue
box-node-sdk is affected by CVE-2023-42282. Need to bump up
proxy-agent
to6.4.0
which addresses the above CVE by removing the vulnerable dependency.Versions Used
Node SDK: 3.4.2