Skip to content

update debug dependency to 4.3.2 ( Memory Leak ) #207

@maximegheraille

Description

@maximegheraille

Hi,

We have seen this vulnerability for the dependency [email protected] with a CVSS score of 7.5.
NPM debug prior to 4.3.0 has a Memory Leak when creating debug instances inside a function which can have a significant impact in the Availability. This happens since the function debug in the file src/common.js does not free up used memory.

To resolve this issue we need to upgrade to version [email protected] which will resolve the vulnerability.

I see that there is an open PR to upgrade the dependency #201, is there a reason is has been open for so long not yet merged?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions