[THRIFT-5427] Thrift v0.14.1 contains dependecy to vulnerable `ws` module

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 0.14.1
• Component/s: Node.js - Library
• Assignee: Unassigned
• Reporter: Hitendra Singh Hada
• Created: 01/Jun/21 17:51
• Updated: 03/Aug/21 20:05

Description

Currently thrift v0.14.1 contains dependecy of `ws` module v5.2.2 which is vulnerable. To fix the vulnerability you need to update `ws` module with version 7.4.6. Please have a look and advise ETA.