- Missing require('fs') in `server/app.js` See issue [#135](../../issues/135)
- Patched read-config to mitigate vulnerability in js-yaml
- issue not exploitable on webssh2 implementation
- patched anyway
- sending my patch upstream to read-config, webssh2 package.json points to patched version in my repository https://github.com/billchurch/nodejs-read-config
- See https://github.com/nodeca/js-yaml/issues/475 for more detail
|
||
|---|---|---|
| .. | ||
| BIG-IP-ILX-WebSSH2-current.tgz | ||
| BIG-IP-ILX-WebSSH2-current.tgz.sha256 | ||