steves/node-jira

Remote Memory Exposure Vulnerability

Opened this issue · 0 comments

pbnj commented

The version of request package being used here ("request": "<2.16.0") is vulnerable to remote memory exposure attack.

This has been patched up in later versions of request package.

Remediation is as simple as upgrading the dependency to version 2.68.0 or higher.

More information: