From 3d12053ce862f29f7653dc91015868af13e98882 Mon Sep 17 00:00:00 2001 From: Snyk Community Date: Tue, 25 Oct 2016 10:53:17 +0300 Subject: [PATCH] Fix for the ReDOS vulnerability api-docs is currently affected by the high-severity [ReDOS vulnerability](https://snyk.io/vuln/npm:negotiator:20160616). Vulnerable module: `negotiator` Introduced through: ` express` This PR fixes the ReDoS vulnerability by upgrading `express` to version 4.0.0. Check out the [Snyk test report](https://snyk.io/test/github/maxcdn/api-docs) to review other vulnerabilities that affect this repo. [Watch the repo](https://snyk.io/add) to * get alerts if newly disclosed vulnerabilities affect this repo in the future. * generate pull requests with the fixes you want, or let us do the work: when a newly disclosed vulnerability affects you, we'll submit a fix to you right away. Stay secure, The Snyk team --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index ee54085..e509231 100755 --- a/package.json +++ b/package.json @@ -31,7 +31,7 @@ "jade": "^1.2.0", "marked": "^0.3.1", "less": "^1.7.0", - "express": "^3.4.8", + "express": "^4.0.0", "minimist": "0.0.8", "watch": "^0.9.0" }