ovhemert / pino-datadog

đŸŒČA transport for pino that sends messages to DataDog
MIT License
36 stars 24 forks source link

Release a version with the axios vulnerability fix (CVE-2020-28168) #55

Closed theclive closed 3 years ago

theclive commented 3 years ago

🐛 Bug Report

We use pino-datadog in all our projects and receive this advisory alert on every npm i asaxios is a dependency of pino-datadog. Please could you release a new version with the new axios version that has already been committed to master by snyk-bot. I'm happy to do it if you share details on how you want it done?

To Reproduce

Steps to reproduce the behaviour:

Paste your code here:

npm install pino-datadog
npm audit

Expected behaviour

Should not have any high severity vulnerabilities (or higher) that have already been resolved by dependency maintainers.

Actual behaviour

image

Your Environment

ovhemert commented 3 years ago

Thanks for letting me know. v2.0.2 now available: https://github.com/ovhemert/pino-datadog/releases/tag/v2.0.2