This repository has been archived by the owner on Sep 26, 2024. It is now read-only.
Update node-forge version to 1.3.1 #397
Labels
priority: p2
Moderately-important priority. Fix may not be included in next release.
type: bug
Error or flaw in code with unintended results or allowing sub-optimal usage patterns.
We have identified a security vulnerability in the route that ends with
@googleapis>google-auth-library>gtoken>google-p12-pem>node-forge
and@google-cloud/pubsub>google-auth-library>gtoken>google-p12-pem>node-forge
fornode-forge
version1.0.0
.googleapis
andgoogle-cloud/pubsub
is currently usingnode-forge
version1.0.0
(https://github.com/googleapis/google-p12-pem/blob/main/package.json#L43)Upgrading to
node-forge
version1.3.1
will help us to resolve this vulnerability.The text was updated successfully, but these errors were encountered: