Dependency vulnerability

Open darkwebdev opened this issue 7 years ago • 1 comments

NSP reports a potential vulnerability in dependency fresh: https://nodesecurity.io/advisories/526

Does it make sense to upgrade an express to version ^4.15.5?

Apr 26 '18 15:04 darkwebdev

Same thing here:

33 vulnerabilities found [1315 packages audited]
    Severity: 19 Low | 2 Moderate | 10 High | 2 Critical

Jun 01 '18 16:06 KBPsystem777