Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update extend, which has a CVE #82

Closed
wants to merge 1 commit into from
Closed

Update extend, which has a CVE #82

wants to merge 1 commit into from

Conversation

jamiek-acl
Copy link

@codecov-io

This comment has been minimized.

Sign in to view
@wooorm
Copy link
Member

wooorm commented Dec 31, 2019

I don’t think this is really a problem, especially for us, see the earlier comments in justmoon/node-extend#48.
Also: see our security policy here.
And finally, your fixes doesn’t fix anything. We are using ^ in semver, so anyone doing npm install should get the latest “patched” version anyway.

@wooorm wooorm closed this Dec 31, 2019
@wooorm wooorm added 📦 area/deps This affects dependencies 🙅 no/wontfix This is not (enough of) an issue for this project labels Dec 31, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
📦 area/deps This affects dependencies 🙅 no/wontfix This is not (enough of) an issue for this project
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
3 participants
@jamiek-acl @codecov-io @wooorm