Marc Trudel created THRIFT-3975:
-----------------------------------

             Summary: Security issue in Node.js module dependencies
                 Key: THRIFT-3975
                 URL: https://issues.apache.org/jira/browse/THRIFT-3975
             Project: Thrift
          Issue Type: Bug
          Components: Node.js - Library
    Affects Versions: 0.9.3
         Environment: Any
            Reporter: Marc Trudel


Using RetireJS, the following information was reported:

ws 0.4.32 has known vulnerabilities:  https://nodesecurity.io/advisories/67 
advisory: DoS due to excessively large websocket message; 
https://nodesecurity.io/advisories/120
project 0.0.1
↳ ws 0.4.32

This shouldn't affect me in the use-case I'll be using Thrift, but should 
obviously get fixed at some point.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to