Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security Issue #124

Open
SharmaBiswadev opened this issue Mar 25, 2021 · 1 comment
Open

Security Issue #124

SharmaBiswadev opened this issue Mar 25, 2021 · 1 comment

Comments

@SharmaBiswadev
Copy link

SharmaBiswadev commented Mar 25, 2021 •
edited
Loading

psi version: - 4.1.0

We are getting vulnerability issue while doing npm audit fix for Angular js project in psi npm

High Prototype Pollution in node-forge
Package node-forge
Patched in >= 0.10.0
Dependency of psi [dev]
Path psi > googleapis > google-auth-library > gtoken >
google-p12-pem > node-forge
More info https://npmjs.com/advisories/1561

High Prototype Pollution in node-forge
Package node-forge
Patched in >= 0.10.0
Dependency of psi [dev]
Path psi > googleapis > googleapis-common > google-auth-library >
gtoken > google-p12-pem > node-forge
More info https://npmjs.com/advisories/1561

Please let us know if any fix is available.
@WhatIfWeDigDeeper WhatIfWeDigDeeper mentioned this issue Apr 10, 2021
Open
WhatIfWeDigDeeper added a commit to WhatIfWeDigDeeper/psi that referenced this issue Apr 10, 2021
@WhatIfWeDigDeeper
update googleapis to latest to fix issue GoogleChromeLabs#124
a8ce1ef 
bump package version
rodriigomedeiros added a commit to rodriigomedeiros/psi that referenced this issue Aug 23, 2021
@rodriigomedeiros
Update googleapis package to latest (GoogleChromeLabs#124)
876af24
@cbravo
Copy link

cbravo commented Jan 9, 2024

Would love if this got merged in!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@cbravo @SharmaBiswadev