node-flowdock
node-flowdock copied to clipboard
Fix for 2 vulnerable dependency paths
node-flowdock currently has a 2 vulnerable dependency paths, introducing 2 different types of known vulnerabilities.
This PR fixes vulnerable dependencies.
-
ReDOS vulnerability in the
hawk
dependency. -
remote memory exposure vulnerability in the
request
dependency.
You can see Snyk test report of this project for details.
This PR changes Package.json
to upgrade request
to the newer 2.74.0 version, and will fix all the vulnerabilities.
You can get alerts and fix PRs for future vulnerabilities for free by watching this repo with Snyk.
Stay Secure, The Snyk Team
please :)
@snyk-community any chance you can fix the merge conflict to make this an easier action for the maintainers?