Command Injection due to old node-modules

[KevinHaisol]

Any chance you can update the jasmine-growl-reporter package to version 1.0.1? There is a security vulnerability in the current version (0.0.3)

Once you get this fixed, other library's that depend on your library can be updated as well.

Thanks

[jcubic]

Just one more reason to switch to jest. I've committed my package lock file and now my repo is marked as vulnerable.

[MatissJanis]

1 year has passed and this is still not fixed. 😢

[geoidesic]

Just need to upgrade jasmine-growl-reporter to v2.0.0 – https://github.com/AlphaHydrae/jasmine-growl-reporter. Pretty please!

[geoidesic]

I see this has been addressed, caused breaking changes, and was reverted: #433

[maxwellhadley]

So please fix this!

[daern91]

I forked and fixed this. Feel free to use it in the meanwhile:
https://github.com/daern91/jasmine-node

Just remember that, like discussed, it will not support node < 4

npm i daern91/jasmine-node