Vulnerable to memory leak
bahadrix opened this issue · 1 comments
bahadrix commented
I'm using version 3.7.2 and my IDE (WebStorm) warns about the following vulnerability:
The package
bluebird
is vulnerable to memory leak, when running the function longStackTraces() with the flag--expose_gc
. This causes a significant increase in the memory usage, affecting the server's availability.
Details at: https://devhub.checkmarx.com/cve-details/Cxda14f253-4e52/
benjamingr commented
That's silly, if you have long promise chains turning on longStackTraces (debugging mode) will increase memory consumption and reduce performance. That's the feature, you get slower code that retains more memory but it's easier to debug - like connecting the inspector to a Node project.