
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Welcome to the Yoti NodeJS SDK. This repo contains the tools and step by step instructions you need to quickly integrate your NodeJS back-end with Yoti so that your users can share their identity details with your application in a secure and trusted way.
Requirements - Check you have what you need
Installing the SDK - How to install our SDK
Setup - Setup required before using the Yoti services
Products - Links to more information about the products offered by the Yoti SDK
Support - Please feel free to reach out
Please refer to Travis to see all compatible Node versions.
If you're planning on using the Node SDK on Windows, you'll need to install a few dependencies first:
OpenSSL (normal version, not light) in the same bitness as your Node.js installation.
C:\OpenSSL-Win32
or C:\OpenSSL-Win64
)node-gyp (npm install -g node-gyp
)
npm install --global --production windows-build-tools
To import the Yoti SDK inside your project, you can use your favourite dependency management system. If you are using NPM, you can use the following command to set the Yoti SDK as a dependency:
npm install -S -E yoti
Your package.json file will then be updated to include:
"dependencies": {
"yoti" : "x.x.x"
}
For each service you will need:
The Yoti SDK can be used for the following products, follow the links for more information about each:
For any questions or support please contact us here: https://support.yoti.com Please provide the following to get you up and working as quickly as possible:
Once we have answered your question we may contact you again to discuss Yoti products and services. If you’d prefer us not to do this, please let us know when you e-mail.
For further documentation, see https://developers.yoti.com/yoti/welcome
FAQs
Yoti NodeJS SDK for back-end integration
The npm package yoti receives a total of 3,964 weekly downloads. As such, yoti popularity was classified as popular.
We found that yoti demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.