[THRIFT-5579] CVE-2021-32640 ws dependency vulnerable

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 0.16.0
• Component/s: JavaScript - Library
• Flags: Important
• External issue URL: https://nvd.nist.gov/vuln/detail/CVE-2021-32640
• External issue ID: CVE-2021-32640

Language

javascript

• Assignee: Unassigned
• Reporter: Samuel Smith
• Created: 04/May/22 21:37
• Updated: 30/Aug/22 21:22

Description

CVE-2021-32640 details how the ws module has a vulnerability that is fixed in version 8.6.0.  The thrift module is using version 5.2.3.

Resources:

• ws npm module
• ws changelog