New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update node-forge dependency - CVE-2022-0122 and GHSA-5rrq-pxf6-6jx5 #15

Closed

otramony opened this issue Jan 19, 2022 · 1 comment

otramony commented Jan 19, 2022

I would like to request an update to node-forge to one of the versions where these security issues have been mitigated.

https://nvd.nist.gov/vuln/detail/CVE-2022-0122
GHSA-5rrq-pxf6-6jx5

node-forge - https://github.com/digitalbazaar/forge/tags
v1.2.1, v1.2.0, v1.1.0, v1.0.0

Owner

lenchv commented Jan 19, 2022

Hi @otramony ! Sure, I've just deployed 1.0.2 with updated node-forge

lenchv closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment