[THRIFT-3975] Security issue in Node.js module dependencies

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 0.9.3
• Component/s: Node.js - Library
• Labels: security-issue

Environment

Any

• Assignee: Unassigned
• Reporter: Marc Trudel
• Created: 15/Nov/16 07:10
• Updated: 29/Mar/17 18:53
• Resolved: 29/Mar/17 18:53

Description

Using RetireJS, the following information was reported:

ws 0.4.32 has known vulnerabilities: https://nodesecurity.io/advisories/67 advisory: DoS due to excessively large websocket message; https://nodesecurity.io/advisories/120
project 0.0.1
↳ ws 0.4.32

This shouldn't affect me in the use-case I'll be using Thrift, but should obviously get fixed at some point.

Issue Links

• duplicates: THRIFT-4064 Update node library dependencies