search

rjz / supertest-session

Persistent sessions for supertest
Other
89 stars 21 forks source link

NPM Audit report - Supertest version update. #35

Closed jonathanpdiaz closed 6 years ago

jonathanpdiaz commented 6 years ago

Hi @rjz,

We just bumped our stack to Node 10 and NPM6 and I got this report from npm audit from this lib.

│ Low │ Large gzip Denial of Service │ Package │ superagent │ Patched in │ >=3.7.0 │ Dependency of │ supertest-session [dev] │ Path │ supertest-session > supertest > superagent │ More info │ https://nodesecurity.io/advisories/479

I have tried updating supertest to the 3.1.0 on my local, tests are passing, our projects haven't got issues and the security issue is resolved.

Would you considering update this dependency to remove the warning? I can send a PR if you prefer it, just let me know.

Thanks!

rjz commented 6 years ago

Absolutely, @jonathanpdiaz, and thanks for reporting this! v3.3.0 bumps the dependency version.