search

prose / gatekeeper

Enables client-side applications to dance OAuth with GitHub.
MIT License
761 stars 183 forks source link

Gatekeeper vulnerable to recently announced Node.js security vulnerability #32

Closed compumike08 closed 7 years ago

compumike08 commented 7 years ago

Node.js recently announced a severe security vulnerability (see here), and they recommend upgrading to a patched version of Node.js immediately. Heroku is instructing people to make sure that their "engines.node.version" value in their package.json files is set to a specific version which is patched (see here).

Gatekeeper's current "engines.node.version" value in its package.json value needs to be changed to specify a specific patched version to avoid this security vulnerability.

See PR: #31

dereklieu commented 7 years ago

Merged and deployed with Node ~6.11.1