Sheogorath 3cc957a88b Upgrade LDAP-auth to fix RCE in ldapauth dependency ...

Synk reported an Remote Code Execution vulnerability for the
passport-ldapauth dependency `bunyan`. This RCE is due to wrong command
sanitizing but doesn't only affects the executable the libary provides.
It has no impact on CodiMD.

This patch just updates passport-ldapauth since it's long overdue anyway
and to silence annoying security scanners that pretend this is rather
critical for us.

Reference:
ea21d75f54
https://app.snyk.io/vuln/SNYK-JS-BUNYAN-573166

2020-06-27 13:04:54 +02:00

435 KiB

Raw Blame History

View Raw