Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Fix: Update saml and ejs dependencies #132

Merged
merged 1 commit into from
Sep 6, 2022
Merged

Fix: Update saml and ejs dependencies #132

merged 1 commit into from
Sep 6, 2022

Conversation

madhuriravindramohan-okta
Copy link
Contributor

Description

  1. Updating the saml dependency to address CVE-2021-43138 and CVE-2022-24785.
  2. Updating the ejs dependency to address CVE-2022-29078

References

https://nvd.nist.gov/vuln/detail/CVE-2021-43138
https://nvd.nist.gov/vuln/detail/CVE-2022-24785
https://nvd.nist.gov/vuln/detail/CVE-2022-29078

Testing

Verfied with npm run test

Checklist

  • I have added documentation for new/changed functionality in this PR or in auth0.com/docs
  • All active GitHub checks for tests, formatting, and security are passing
  • The correct base branch is being used, if not the default branch

@madhuriravindramohan-okta madhuriravindramohan-okta merged commit 26b8cbd into master Sep 6, 2022
# for free to join this conversation on GitHub. Already have an account? # to comment
Reviewers

@jakelacey2012 jakelacey2012 jakelacey2012 approved these changes

@CharlesRea CharlesRea CharlesRea approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@madhuriravindramohan-okta @jakelacey2012 @CharlesRea