jpmens / mosquitto-auth-plug

Authentication plugin for Mosquitto with multiple back-ends (MySQL, Redis, CDB, SQLite3)
Other
825 stars 496 forks source link

Merged PR https://github.com/manolodd/mosquitto-pbkdf2/pull/2 #361

Closed manolodd closed 6 years ago

manolodd commented 6 years ago

The library "prompt" for the simple test script requires another lib with a security bug. The automatic snyk test tool flags this as low severity. As both libs (prompt and utile) are not updated for a long time Stefan Seide changed the np.js script to use another more actively maintained library without security warning.

✗ Low severity vulnerability found in utile Description: Uninitialized Memory Exposure Info: https://snyk.io/vuln/npm:utile:20180614 Introduced through: mosquitto-pbkdf2@0.2.1 From: mosquitto-pbkdf2@0.2.1 > prompt@1.0.0 > utile@0.3.0

jpmens commented 6 years ago

Merged, thank you.