Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updating sshpk version #86

Merged
merged 1 commit into from
Oct 30, 2019
Merged

Updating sshpk version #86

merged 1 commit into from
Oct 30, 2019

Conversation

krosenk729
Copy link
Contributor

Protecting package against vulnerabilities https://www.npmjs.com/advisories/606

Protecting package against vulnerabilities https://www.npmjs.com/advisories/606
@spanditcaa
Copy link

spanditcaa commented Oct 3, 2019

@arekinath - possible to merge this? Among others, Request depends this module and as a result many people (github says 3.4 million projects) are potentially exposed to the underlying vulnerability in sshpk. I believe it was your own commit to sshpk (69d24bc6b32c20584b317e7a88c05cc99a497bd9) that we are looking for.

Thanks.

@krosenk729
Copy link
Contributor Author

thanks @spanditcaa and @arekinath - let me know if there is anything else I can do

@spanditcaa
Copy link

see also #68, #80 -- @arekinath -- this resolves/supersedes those issues.

@spanditcaa
Copy link

@geek or anyone else at Joyent paying any attention to this repo?

@kusor kusor merged commit 2424e96 into TritonDataCenter:master Oct 30, 2019
@spanditcaa
Copy link

Thanks @kusor!

@spanditcaa
Copy link

@kusor - how about a version bump and npm publish?

@kusor
Copy link
Contributor

kusor commented Nov 5, 2019

@kusor - how about a version bump and npm publish?

Sounds about right due to #83 too.

dist-tags:
latest: 1.3.0

published just now by kusor

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants