-
Notifications
You must be signed in to change notification settings - Fork 12k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Upgrade needed for packages with dependencies of "hoek": "2.16.3" Security issue as marked by github #10827
Comments
It seems that the package is installed through the following dependency tree : The vulnerability has been fixed in More over, as Here is the state of each dependency :
quick & dirty fix is to try updating from your own package.json the hoek version. I tried last version on an ionic 4 & angular 6 project, and it seems to run fine. if needed, here is the package.json file A quick implementation would be to add |
This should be fine. I can update related packages. |
This issue has been automatically locked due to inactivity. Read more about our automatic conversation locking policy. This action has been performed automatically by a bot. |
If hawk, sntp, boom (one package dependency) cryptiles used for angular cli project? It has a security vulnerability for "hoek": "2.16.3" highlighted by github. Can you check the same? Hopefully its not used in any compiler and it might be a minor issue. Github does not mention issue severity.
Versions
Repro steps
No Steps. CLI dependencies
Observed behavior
NA
Desired behavior
Upgrade packages using hoek to v4.x.x
Mention any other details that might be useful (optional)
NA
The text was updated successfully, but these errors were encountered: