Skip to content

Commit 6d60fb9

Browse files
committed
Fix body-parser vulnerability in sample app
- Changed body-parser from 'latest' to '^1.20.3' (secure version) - Fixes High severity Dependabot alert #2 - Resolves denial of service vulnerability when URL encoding is enabled - Using 'latest' is bad practice as it can pull vulnerable versions
1 parent ba7d0aa commit 6d60fb9

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

sample/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
"license": "APACHE",
1313
"homepage": "https://github.intuit.com/abisalehalliprasan/oauth-jsclient",
1414
"dependencies": {
15-
"body-parser": "latest",
15+
"body-parser": "^1.20.3",
1616
"dotenv": "^5.0.1",
1717
"ejs": "^3.1.9",
1818
"express": "^4.14.0",

0 commit comments

Comments
 (0)