Fix: vulnerability in request dependency

oortcloud / node-ddp-client

A callback style DDP (Meteor's Distributed Data Protocol) node client.

Other

263 stars 80 forks source link

Closed nytamin closed 4 years ago

nytamin commented 6 years ago

request@2.74.0 has a dependency of tunnel-agent@0.4.1, which has a reported vulnerability (see https://nodesecurity.io/advisories/598).

This PR upgrades the dependency of request to latest, in which tunnel-agent also have been fixed.

nytamin commented 4 years ago

Closing this as request is deprecated, so the proper solution would be to use another lib altogether.