Skip to content

Update xmldom#17

Merged
cjbarth merged 1 commit into
node-saml:masterfrom
forty:forty/update-xmldom
Aug 26, 2021
Merged

Update xmldom#17
cjbarth merged 1 commit into
node-saml:masterfrom
forty:forty/update-xmldom

Conversation

@forty

@forty forty commented Aug 20, 2021

Copy link
Copy Markdown
Contributor

Description

Update xmldom (and xml-crypto which also depends on xmldom too) to fix CVE-2021-32796

xml-encryption would also need to be updated if they ever update. See auth0/node-xml-encryption#88

@forty

forty commented Aug 25, 2021

Copy link
Copy Markdown
Contributor Author

Updated the PR to update xml-encryption as well, has they merged to xmldom update

The package is now scoped under @xmldom. See xmldom/xmldom#278
This fixes security vulnerability CVE-2021-32796.
Also update xml-crypto and xml-encryption which depends on xmldom.
@forty forty force-pushed the forty/update-xmldom branch from c18903b to b99db39 Compare August 25, 2021 14:07
@cjbarth cjbarth merged commit f83654b into node-saml:master Aug 26, 2021
@cjbarth cjbarth added the dependencies Relating to updating dependencies label Nov 17, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Relating to updating dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants