search

googleapis / google-p12-pem

**THIS REPOSITORY AND PACKAGE WILL BE DEPRECATED IN JULY 2024** Convert Google .p12 keys to .pem keys.
MIT License
26 stars 22 forks source link

Update node-forge version to 1.3.1 #397

Closed praveendiwakar1 closed 2 years ago

praveendiwakar1 commented 2 years ago

We have identified a security vulnerability in the route that ends with @googleapis>google-auth-library>gtoken>google-p12-pem>node-forge and @google-cloud/pubsub>google-auth-library>gtoken>google-p12-pem>node-forge for node-forge version 1.0.0.

googleapis and google-cloud/pubsub is currently using node-forge version 1.0.0 (https://github.com/googleapis/google-p12-pem/blob/main/package.json#L43)

Upgrading to node-forge version 1.3.1 will help us to resolve this vulnerability.