Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Need to resolve vulnerabilities on snappy. #1462

Open
mma3069 opened this issue Jun 7, 2022 · 0 comments
Open

Need to resolve vulnerabilities on snappy. #1462

mma3069 opened this issue Jun 7, 2022 · 0 comments

Comments

@mma3069
Copy link

mma3069 commented Jun 7, 2022

Need to update snappy version:

As a part of Node js version upgrade we found there are few vulnerabilities on snappy. we need to update snappy to latest version.

Environment:Dev

  • Node version:16
  • Kafka-node version:5.0.0

Include Sample Code to reproduce behavior

npm audit

Windows PowerShell
Copyright (C) Microsoft Corporation. All rights reserved.

Try the new cross-platform PowerShell https://aka.ms/pscore6

PS C:\Users\XXXX\webStormWorkspace\FADFM-35912\fabric-loans-transactions-api> npm audit
npm WARN config global --global, --local are deprecated. Use --location=global instead.

npm audit report

simple-get < 4.0.1
Severity: high
Exposure of Sensitive Information to an Unauthorized Actor in NPM simple-get prior to 4.0.1. - https://huntr.dev/bounties/42c79c23-6646-46c4-871d-219c0d4b4
e31,feross/simple-get@e4af095
fix available via npm audit fix
node_modules/simple-get
prebuild-install <=6.1.4
Depends on vulnerable versions of simple-get
node_modules/prebuild-install
snappy 6.1.0 - 6.3.5
Depends on vulnerable versions of prebuild-install
node_modules/snappy

3 high severity vulnerabilities

To address all issues, run:
npm audit fix

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant