search

gferrin / bitfinex

node.js wrapper for bitfinex cryptocurrency exchange
26 stars 20 forks source link

Update packages with CVEs #24

Open jborrey opened 8 years ago

jborrey commented 8 years ago

The request package in this node module has CVEs. This PR will update it.

Output of $ nsp check --output summary

(+) 4 vulnerabilities found
 Name           Installed   Patched                      Path                                                    More Info
 qs             0.6.6       >= 1.x                       bitfinex@1.0.3 > request@2.30.0 > qs@0.6.6              https://nodesecurity.io/advisories/28
 qs             0.6.6       >= 1.x                       bitfinex@1.0.3 > request@2.30.0 > qs@0.6.6              https://nodesecurity.io/advisories/29
 hawk           1.0.0       >=3.1.3 < 4.0.0 || >=4.1.1   bitfinex@1.0.3 > request@2.30.0 > hawk@1.0.0            https://nodesecurity.io/advisories/77
 tough-cookie   0.9.15      >=2.3.0                      bitfinex@1.0.3 > request@2.30.0 > tough-cookie@0.9.15   https://nodesecurity.io/advisories/130

Also had to include in the package.json file the dependency on coffee-scipt since it was missing.