vuln: Prototype Pollution and ReDoS introduced via google-gax@0.15.0

[stephenplusplus]

Copied from original issue: googleapis/nodejs-datastore#69

@anishkny
March 16, 2018 12:06 AM

Snyk reports vulns:

1. Prototype Pollution - Vulnerable module: hoek - Introduced through: google-gax@0.15.0
2. Regular Expression Denial of Service (ReDoS) - Vulnerable module: protobufjs - Introduced through: google-gax@0.15.0

See: https://snyk.io/test/npm/@google-cloud/datastore

Environment details

• OS: Any
• Node.js version: Any
• npm version: Any
• @google-cloud/datastore version: 1.3.5

Steps to reproduce

N/A

[anishkny]

Snyk report for google-gax v0.15.0: https://snyk.io/test/npm/google-gax/0.15.0

[JustinBeckwith]

This was resolved in 0.16 🎉