jparis / qrs-interact

Inactive - QRS Interact is a simple javascript library that allows users to send queries to the Qlik Sense Repository Service.
GNU General Public License v3.0
10 stars 7 forks source link

Fix prototype pollution (minor) vulnerability #55

Closed mountaindude closed 6 years ago

mountaindude commented 6 years ago

Due to old version of nock being used in qrs-interact, it was suffering from https://snyk.io/vuln/npm:lodash:20180130. It is a minor vulnerability, but still worth fixing. Upgrading module dependencies to latest version fixes the issue. Tests are still passing after the upgrade.