Security issue

[lirantal]

Hi,

I'm a member of the Node.js Security WG and we received a report regarding a security issue with this module.

We tried inviting the author by e-mail but received no response so I'm opening this issue and inviting anyone with commit and npm publish rights to collaborate with us on a fix.

[Kikobeats]

Hey,

I saw the mail but unfortunately no time to priorize this.

PR are welcome!

[tm1000]

@Kikobeats why did you close this? It's like you are trying to hide the security issue from people seeing it. If PRs are welcome then just let the ticket sit open.

[Serkan-devel]

Isn't a security issue a priority? My PR has been untouched for months for example Minds/minds#77 . How quickly do they respond here?