You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2022/12/22 09:10:38 UTC
[GitHub] [pulsar-client-node] nkurihar opened a new pull request, #261: Bump async from 3.2.1 to 3.2.4
nkurihar opened a new pull request, #261:
URL: https://github.com/apache/pulsar-client-node/pull/261
Fix the following vulnerability issue.
```
% npm audit
# npm audit report
async 3.0.0 - 3.2.1
Severity: high
Prototype Pollution in async - https://github.com/advisories/GHSA-fwr7-v2mv-hh25
fix available via `npm audit fix`
node_modules/grunt-legacy-util/node_modules/async
1 high severity vulnerability
To address all issues, run:
npm audit fix
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar-client-node] BewareMyPower merged pull request #261: Bump async from 3.2.1 to 3.2.4
Posted by GitBox <gi...@apache.org>.
BewareMyPower merged PR #261:
URL: https://github.com/apache/pulsar-client-node/pull/261
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org