jfromaniello/selfsigned

Fix vulnerabilities (CVE-2022-24771, CVE-2022-24772, CVE-2022-24773)

jungdaniel opened this issue · 2 comments

This library depends on ^1.2 which means all 1s. This change is not necessary I think

» npm i selfsigned --save

added 2 packages, and audited 3 packages in 1s

found 0 vulnerabilities

» cat package-lock.json | jq '.packages."node_modules/node-forge".version'
"1.3.0"

Anyway, I just updated the package-lock.json and removed the .2 from the package.json