Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix for the ReDOS vulnerability #28

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Commits on Oct 25, 2016

  1. Fix for the ReDOS vulnerability

    api-docs is currently affected by the high-severity [ReDOS vulnerability](https://snyk.io/vuln/npm:negotiator:20160616). 
    
    Vulnerable module: `negotiator`
    Introduced through: ` express`
    
    This PR fixes the ReDoS vulnerability by upgrading `express` to version 4.0.0.
    
    Check out the [Snyk test report](https://snyk.io/test/github/maxcdn/api-docs) to review other vulnerabilities that affect this repo. 
    
    [Watch the repo](https://snyk.io/add) to 
    * get alerts if newly disclosed vulnerabilities affect this repo in the future. 
    * generate pull requests with the fixes you want, or let us do the work: when a newly disclosed vulnerability affects you, we'll submit a fix to you right away. 
    
    Stay secure, 
    The Snyk team
    snyk-community authored Oct 25, 2016
    Configuration menu
    Copy the full SHA
    3d12053 View commit details
    Browse the repository at this point in the history