search

gabceb / node-metainspector

Node npm for web scraping purposes. It scrapes a given URL, and returns you its title, meta description, meta keywords, an array with all the links, all the images in it, etc. Inspired by the metainspector Ruby gem
MIT License
129 stars 52 forks source link

Fix for 2 vulnerable dependency paths #34

Closed snyk-community closed 8 years ago

snyk-community commented 8 years ago

node-metainspector currently has a 2 vulnerable dependency paths, introducing 2 different types of known vulnerabilities.

This PR fixes vulnerable dependencies, remote memory exposure vulnerability in the request dependency and ReDos vulnerability in the hawk dependency.

You can see Snyk test report of this project for details.

This PR changes Package.json to upgrade request to the newer 2.74.0 version, and will fix the vulnerabilities.

You can get alerts and fix PRs for future vulnerabilities for free by watching this repo with Snyk.

Stay Secure, The Snyk Team