Skip to content
This repository has been archived by the owner on Feb 8, 2019. It is now read-only.

Update express to mitigate vulnerabilities #46

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Update express to mitigate vulnerabilities #46

wants to merge 1 commit into from

Conversation

abstractj
Copy link

Good morning, express 3.1.0 is vulnerable to:

@brentlintner I couldn't find any place to disclose this issue in private, neither make this issue security sensitive. Let me know if you have questions.

I think is important to get this fix in, once it also affects cordova-cli.

@brentlintner
Copy link
Contributor

Hey @abstractj awesome! Thanks for the PR. I plan to pull in ASAP. I just noticed that with the 4.x update, some middleware was moved out of core into their own packages that need to be added. Unless you or someone else does, I will try to do that when I get a chance. :-)

@abstractj
Copy link
Author

@brentlintner go ahead my friend, I think you're more familiar with ripple than me. Glad to help.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants