Skip to content
This repository has been archived by the owner on Sep 3, 2024. It is now read-only.

hubot-slack security issue - Machine-In-The-Middle - https-proxy-agent #68

Closed
xtagon opened this issue Mar 21, 2020 · 0 comments
Closed

Comments

@xtagon
Copy link
Member

xtagon commented Mar 21, 2020

npm audit reported a lot of security issues. All of them went away after updating a few NPM packages, except one:

                       === npm audit security report ===                        
                                                                                
# Run  npm update https-proxy-agent --depth 3  to resolve 1 vulnerability
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ High          │ Machine-In-The-Middle                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ https-proxy-agent                                            │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ hubot-slack                                                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ hubot-slack > @slack/client > https-proxy-agent              │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/1184                            │
└───────────────┴──────────────────────────────────────────────────────────────┘


found 1 high severity vulnerability in 908 scanned packages
  run `npm audit fix` to fix 1 of them.

Blocked by slackapi/hubot-slack#578

@xtagon xtagon closed this as completed Sep 2, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant