Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

deps: Update debug because of security issue #685

Merged
merged 2 commits into from Dec 28, 2017
Merged

deps: Update debug because of security issue #685

merged 2 commits into from Dec 28, 2017

Conversation

danez
Copy link
Contributor

@danez danez commented Sep 28, 2017

https://nodesecurity.io/advisories/534

Could you also release a new version?

/cc @aheckmann

@danez danez changed the title deps: Allow debug@2.6.9 because of security issue deps: Update debug because of security issue Sep 28, 2017
@devony
Copy link

devony commented Oct 19, 2017

@aheckmann could we get this merged? nsp checks are failing for us on this package.

@bfla
Copy link

bfla commented Dec 13, 2017

@aheckmann nsp checks are failing for my team, too. it looks like the security issue has been fixed in debug 2.6.9 and greater so it can probably be fixed by updating to version 3.10 (which this pull request does) or "debug": "~2.6.9" (if you want the minimalist fix).

Thanks for your work on this package. It rocks! 🎸

@aheckmann aheckmann merged commit 442d081 into aheckmann:master Dec 28, 2017
@aheckmann
Copy link
Owner

thanks! merged & released in 1.23.1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants