icodeforlove / node-cloudflare

Node.js CloudFlare V4 API wrapper
MIT License
30 stars 14 forks source link

joi module contains a moderate security vulnerability #15

Closed adubatl closed 6 years ago

adubatl commented 6 years ago

Here is the hoek vulnerability https://nodesecurity.io/advisories/566

screen shot 2018-05-16 at 8 54 26 am

New versions of joi do not have this vulnerability as they use hoek 5.x.x

icodeforlove commented 6 years ago

Ok, I'll look into updating this.

The usage of Joi here is purely just for dev usage, and shouldn't be directly exposed to the client in majority of use cases.

adubatl commented 6 years ago

Thank you :)

icodeforlove commented 6 years ago

updated