twskj / pretty-swag

Pretty UI for Swagger spec
MIT License
122 stars 20 forks source link

Update dependencies with security vulnerabilities #64

Closed ljipear closed 5 years ago

ljipear commented 5 years ago

npm audit was giving warnings about security vulnerabilities with the following packages:

js-yaml versiosn < 3.13.1, a dependency of json-schema-ref-parser, had a code injection vulnerability (https://www.npmjs.com/advisories/813)

marked versions < 0.6.2 had a regular expression denial of service vulnerability (https://nodesecurity.io/advisories/812)

I updated the json-schema-ref-parser and marked packages to their latest versions that addresses these warning.

twskj commented 5 years ago

Thanks for the PR. I'll double check it on the weekend