hanzoai/node-jsonwebtoken
2
0
Fork 0
mirror of https://github.com/hanzoai/node-jsonwebtoken.git synced 2026-09-24 17:00:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

bump ms to v2 due a ReDoS vuln (#352)

Browse Source 
[email protected] is vulnerable to a ReDoS attack: https://snyk.io/vuln/npm:ms:20170412

Looking at the code, the breaking change in [email protected] that the accepted string is now limited to 100 chars.
This commit is contained in:
Dominykas Blyžė
2017-05-17 11:29:48 +02:00
committed by Eduardo Diaz
parent 2cab40aec0
commit d194df0171
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
package.json
+1 -1
View File
@@ -22,7 +22,7 @@
"joi": "^6.10.1",
"jws": "^3.1.4",
"lodash.once": "^4.0.0",
"ms": "^0.7.1",
"ms": "^2.0.0",
"xtend": "^4.0.1"
},
"devDependencies": {