Skip to content

Commit 3771c1d

Browse files
committed
Update Dockerode, for small bugfixes & ssh2 (inconsequential) vuln fix
The SSH vulnerability (CVE-2023-48795) is very interesting and worth avoiding in general, but in our case AFAIK it's not possible to use HTTP Toolkit with a Docker engine over SSH (the only cases where this module is used) and so the relevant code is never actually run.
1 parent 2fea8bf commit 3771c1d

File tree

2 files changed

+28
-28
lines changed

2 files changed

+28
-28
lines changed

package-lock.json

Lines changed: 27 additions & 27 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,7 @@
6262
"destroyable-server": "^1.0.0",
6363
"dns2": "^2.0.1",
6464
"docker-file-parser": "^1.0.5",
65-
"dockerode": "^4.0.0",
65+
"dockerode": "^4.0.2",
6666
"env-paths": "^1.0.0",
6767
"event-stream": "^4.0.1",
6868
"express": "^4.17.3",

0 commit comments

Comments
 (0)