Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump ws to 8.17.1 #226

Closed
jbouder opened this issue Jul 3, 2024 · 2 comments
Closed

Bump ws to 8.17.1 #226

jbouder opened this issue Jul 3, 2024 · 2 comments

Comments

@jbouder
Copy link

jbouder commented Jul 3, 2024 •
edited

Describe the bug

The current version of ws utilized by lighthouse core is affected by the following vulnerability: DoS when handling a request with many HTTP headers

Requesting an update to this dependency to the latest version of 8.17.1. I would also be interested in creating a PR to resolve the vulnerability myself. If that makes sense, can you provide any specific guidance on next steps? Thanks!

Reproduction

No response

System / Nuxt Info

No response
@harlan-zw
Copy link
Owner

Hi, thanks for the issue. I've just pushed out a release with bumped deps.

@jbouder
Copy link
Author

jbouder commented Jul 15, 2024

Hi, thanks for the issue. I've just pushed out a release with bumped deps.

That did it, thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@harlan-zw @jbouder