NPR reported a critical vulnerability in this library on February 15th, 2018 with no details (said details will be coming next week). Per NPR's guidance, any production code using pym.js needs to be pulled or updated to use this new library. I created an issue & pushed up a PR that incorporates the new ...
from Google Alert - vulnerability http://ift.tt/2Cq1lHu
via IFTTT
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment