Vulnerability issue in moment in versions < 2.19.3

[pavankumartp]

Can you update the "moment" dependency in the "saml" module to 2.19.3 or later so that the vulnerability is covered?
See moment/moment#4163 for more details.
Our company's security scan identified this and asking us to change. I did not think there is any other way than asking you to change the version of moment.

Thanks so much.

best regards,
Pavan.

[TimFerrell]

Thanks for raising this, I've opened #60 to resolve.

[TimFerrell]

Thanks for reporting. The fix is merged.

[pavankumartp]

In the npm registry, the version is still 0.13.0. I guess this would still not consider the latest moment version? Would you plan to then push the latest to npm?

[TimFerrell]

Latest tag has been pushed: https://www.npmjs.com/package/saml/v/0.14.0