EN-36197: GITHUB Vulnerability : CRITICAL : socrata / odn-backend : v… - Githubissues

socrata / odn-backend

Backend for the Open Data Network.

Other

9 stars 6 forks source link

EN-36197: GITHUB Vulnerability : CRITICAL : socrata / odn-backend : v… #113

Closed ToshMeston closed 5 years ago

ToshMeston commented 5 years ago

…arious components

Updated the following NPM packages:

braces
cli
deep-extend
diff
fresh
fstream
hoek
is-my-json-valid
lodash.template
memjs
mime
parsejson
randomatic
ws

The following is a devDependency so we don't need to update it. I actually tried, but it caused the tests to hang.

growl — used by mocha-parallel-tests which is just a devDependency

The following are dependencies of components that are at their latest version and can't be updated.

cryptiles — Latest chakram only includes 3.1.2 of cryptiles
debug — Latest nodemon and istanbul-middleware only includes 2.2.0 of debug
extend — Latest chakram only includes 3.0.1 of extend
handlebars — Latest istanbul-middleware only includes 4.0.11 of handlebars
js-yaml — Latest istanbul-middleware only includes 3.10.0 of js-yaml
minimatch — Latest istanbul-middleware only includes 2.0.10 of minimatch
sshpk — Latest chakram only includes 1.13.1 of sshpak
stringstream — Latest chakram only includes 0.0.5 of stringstream