New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CVE-2014-1936,nodemon introduce rc@1.2.8 raise security issue #2024

Closed

xiangwj opened this issue Jun 22, 2022 · 1 comment

xiangwj commented Jun 22, 2022

Expected behaviour

version of rc introduced by nodemon later than 1.7.1-5 to fix CVE-2014-1936

Actual behaviour

version of rc introduced by nodemon is 1.2.8

Steps to reproduce

visit https://npm.anvaka.com/#/view/2d/nodemon and find the rc

https://nvd.nist.gov/vuln/detail/CVE-2014-1936

Owner

remy commented Jun 28, 2022

Fixed in #2033

remy closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment