Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

npm audit high severity vulnerability #904

Closed
johnjacobkenny opened this issue Oct 6, 2020 · 3 comments · Fixed by #905
Closed

npm audit high severity vulnerability #904

johnjacobkenny opened this issue Oct 6, 2020 · 3 comments · Fixed by #905
Assignees
Labels
api: logging Issues related to the googleapis/nodejs-logging API.

Comments

@johnjacobkenny
Copy link

The fix may be in a dependency, but capturing this issue here since an update is required for this library.

image

  1. Is this a client library issue or a product issue?
    Client library issue

  2. Did someone already solve this?
    No.

  3. Do you have a support contract?
    No.

Environment details

  • OS: NA
  • Node.js version: NA
  • npm version: NA
  • @google-cloud/logging version: 8.0.6

Steps to reproduce

  1. Run npm audit
@product-auto-label product-auto-label bot added the api: logging Issues related to the googleapis/nodejs-logging API. label Oct 6, 2020
@stephenplusplus stephenplusplus self-assigned this Oct 6, 2020
@stephenplusplus
Copy link
Contributor

stephenplusplus commented Oct 6, 2020

Thanks!

Status tracker:

  • @google-cloud/logging - fixed in 8.0.8
    • @google-cloud/common - fixed in 3.4.1
      • google-auth-library - fixed in 6.1.1
        • gtoken - fixed in 5.0.4
          • google-p12-pem - fixed in 3.0.3
            • node-forge - fixed in 0.10.0

@stephenplusplus
Copy link
Contributor

stephenplusplus commented Oct 6, 2020

It's out! 8.0.8

@johnjacobkenny
Copy link
Author

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
api: logging Issues related to the googleapis/nodejs-logging API.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants