Security issue in @isomorphic-git/cors-proxy

[colin-ife-snyk]

Hi, 👋

A security issue in @isomorphic-git/cors-proxy was disclosed to us from an independent researcher. Please could a maintainer of this project contact me by email (via my GitHub profile) so that we can discuss the issue privately?

Kind regards,
Snyk Security Team

[LeifAndersen]

Question, did this ever get resolved?

(I'm not a maintainer of isomorphic git (yet), but I am a developer who uses i in my code.)

[jcubic]

I just realized this issue exists. I'm the current maintainer, but I think that I've become one after the issue was created. That's why I've missed this.

[mainrs]

Are there plans to fix and disclose the issue?

[jcubic]

Ask @colin-ife-snyk he didn't reply to my email.

[jcubic]

If he will not reply I will contact the Snyk team, maybe he doesn't work there anymore and the information on his GitHub profile are outdated. FWIW I didn't get a bounce email.