From 15e9abf3f9342ab3dab92ad0709b4db885ec8750 Mon Sep 17 00:00:00 2001 From: Brian Clifton Date: Thu, 28 Sep 2017 08:54:55 -0700 Subject: [PATCH] Update to a version of `mime` which has been patched for Regular Expression Denial of Service vulnerability This was discovered via https://nodesecurity.io/advisories/535 See https://github.com/broofa/node-mime/issues/167#issuecomment-331972723 for more info --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 54505ec350..4b3568c928 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "inherits": "^2.0.1", "load-ip-set": "^1.2.7", "memory-chunk-store": "^1.2.0", - "mime": "^1.3.4", + "mime": "^1.4.1", "multistream": "^2.0.5", "package-json-versionify": "^1.0.2", "parse-torrent": "^5.8.0",