Switch socksv5 dependency

sanketbajoria / ssh2-promise

ssh with promise/async await and typescript support

https://www.npmjs.com/package/ssh2-promise

MIT License

148 stars 24 forks source link

Switch socksv5 dependency #20

Closed NetOpWibby closed 5 years ago

NetOpWibby commented 5 years ago

socksv5 has a minor vulnerability via the ipv6 module that has since been renamed to ip-address. Heroku has published a fork of socksv5 that replaces the outdated ipv6 with ip-address.

You can find their fork here.

sanketbajoria commented 5 years ago

@NetOperatorWibby Switched to heroku version https://github.com/sanketbajoria/ssh2-promise/commit/240b3138e5d5663d7c66a4385e1c8bb01087483b