Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Security] DOS vulnerability in requirement ws@2.3.1 #542

Closed
1 of 2 tasks
jdforsythe opened this issue Nov 8, 2017 · 1 comment
Closed
1 of 2 tasks

[Security] DOS vulnerability in requirement ws@2.3.1 #542

jdforsythe opened this issue Nov 8, 2017 · 1 comment

Comments

@jdforsythe
Copy link

Note: for support questions, please use one of these channels: stackoverflow or slack

You want to:

  • report a bug
  • request a feature

Current behaviour

Dependency on ws module with vulnerability

https://nodesecurity.io/advisories/550

Steps to reproduce (if the current behaviour is a bug)

Expected behaviour

Setup

  • OS:
  • browser:
  • engine.io version:

Other information (e.g. stacktraces, related issues, suggestions how to fix)

Upgrade ws from 2.3.1 to >= 3.3.1
@jdforsythe jdforsythe mentioned this issue Nov 8, 2017
Closed
2 tasks
@exsilium exsilium mentioned this issue Nov 12, 2017
Merged
@darrachequesne
Copy link
Member

Closed by #543. Thanks for the heads-up!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@jdforsythe @darrachequesne