json-schema-generator icon indicating copy to clipboard operation
json-schema-generator copied to clipboard

Update shrinkwrap and request dependency due to tough-cookie

Open elkorep opened this issue 7 years ago • 1 comments

Update tough-cookie version to at least 2.3.0 https://github.com/krg7880/json-schema-generator/blob/master/npm-shrinkwrap.json#L150

Update request to v2.81.1 Reason being is that the dependency tough-cookie is v2.3.0 on that version while on request v2.47.x and v2.51.x uses tough-cookie v0.12.0 which has vulnerability issues

npm WARN deprecated [email protected]: ReDoS vulnerability parsing Set-Cookie https://nodesecurity.io/advisories/130

The latest request module has [email protected] which fixes this issue

elkorep avatar Aug 09 '17 16:08 elkorep

The issue has been resolved, Thanks to schadha-ibm and krg7880.

smartmouse avatar Oct 19 '17 22:10 smartmouse