New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update hoek dependency #71

Open

urbanslug opened this issue May 7, 2018 · 1 comment

Collaborator

urbanslug commented May 7, 2018 •

edited

Loading

Our dependency tree contains hoek 2.16.3 which has a vulnerability.

We need to update it to a version >= 5.0.3 according to the details of the CVE which is patched for this.

References

CVE-2018-3728

Collaborator Author

urbanslug commented May 21, 2018

Requires an update in the BotBuilder version of jsonwebtoken but this might cause breaking changes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment