Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update debug dependency to 4.3.2 ( Memory Leak ) #207

Open
maximegheraille opened this issue Jul 4, 2024 · 0 comments
Open

update debug dependency to 4.3.2 ( Memory Leak ) #207

maximegheraille opened this issue Jul 4, 2024 · 0 comments

Comments

@maximegheraille
Copy link

maximegheraille commented Jul 4, 2024

Hi,

We have seen this vulnerability for the dependency [email protected] with a CVSS score of 7.5.
NPM debug prior to 4.3.0 has a Memory Leak when creating debug instances inside a function which can have a significant impact in the Availability. This happens since the function debug in the file src/common.js does not free up used memory.

To resolve this issue we need to upgrade to version [email protected] which will resolve the vulnerability.

I see that there is an open PR to upgrade the dependency #201, is there a reason is has been open for so long not yet merged?

@maximegheraille maximegheraille closed this as not planned Won't fix, can't repro, duplicate, stale Jul 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant