Skip to content
This repository was archived by the owner on Feb 8, 2019. It is now read-only.

Update express to mitigate vulnerabilities#46

Open
abstractj wants to merge 1 commit intoapache:masterfrom
abstractj:update-express
Open

Update express to mitigate vulnerabilities#46
abstractj wants to merge 1 commit intoapache:masterfrom
abstractj:update-express

Conversation

@abstractj
Copy link

Good morning, express 3.1.0 is vulnerable to:

@brentlintner I couldn't find any place to disclose this issue in private, neither make this issue security sensitive. Let me know if you have questions.

I think is important to get this fix in, once it also affects cordova-cli.

@brentlintner
Copy link
Contributor

Hey @abstractj awesome! Thanks for the PR. I plan to pull in ASAP. I just noticed that with the 4.x update, some middleware was moved out of core into their own packages that need to be added. Unless you or someone else does, I will try to do that when I get a chance. :-)

@abstractj
Copy link
Author

@brentlintner go ahead my friend, I think you're more familiar with ripple than me. Glad to help.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants