New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update torrent-discovery Dependency #191

Open

ultimate-tester opened this issue Dec 23, 2018 · 1 comment

ultimate-tester commented Dec 23, 2018

Currently the torrent-discovery dependency is outdated causing the following Denial of Service exploit:

High Denial of Service

Package ws

Patched in >= 1.1.5 <2.0.0 || >=3.3.1

Dependency of torrent-stream

Path torrent-stream > torrent-discovery > bittorrent-tracker >
simple-websocket > ws

More info https://nodesecurity.io/advisories/550

Please update the dependency to the latest version, this package is behind by quite some major versions..

G-Ray commented Feb 5, 2019

See #190

asapach mentioned this issue

torrent-stream - vulnerability asapach/peerflix-server#166

Closed

pataquets mentioned this issue

heroku deploy not working KiraLT/torrent-stream-server#6

Closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment