Security issue: Prototype pollution attack(Introduced by the request@2.79.0 => hawk@3.1.3 => hoek@2.16.3)

[alex-kovoy]

This is a dup of #2288 which is marked as fixed but it seems that this commit was overridden. Package.json still has the old version

    "request": "~2.79.0",

[alex-kovoy]

The issue is not fixed as package.json still has an old version. The commit with the fix has been lost.

[xzyfer]

It cannot be fixed without break node < 4 support

…

On Fri., 27 Apr. 2018, 9:47 pm Alexey Kontsevoy, ***@***.***> wrote: The issue is not fixed as package.json still has an old version. The commit with the fix has been lost. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#2352 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAjZWEzeVAuBfhDu4tXcZ4kAcN6AUgblks5tswVZgaJpZM4ToBTC> .