Soketi was exposed to Sandbox Escape vulnerability via vm2

緊急 9.8GHSA-g6w6-h933-4rc5 · 03/08/2023 公開 · 03/08/2023 更新

要点

パッケージ	影響を受けるバージョン	修正済みバージョン
@soketi/soketi npm	`< 1.6.0`	`1.6.0`

What kind of vulnerability is it? Who is impacted? Anyone who might have used Soketi with the cluster driver (or through PM2).

Has the problem been patched? What versions should users upgrade to? Get the latest version of Soketi.

Is there a way for users to fix or remediate the vulnerability without upgrading? None. It's advised to upgrade to the latest version.

Are there any links users can visit to find out more?

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

パッケージ

影響を受けるバージョン

修正済みバージョン

npm

< 1.6.0

1.6.0

概要

What kind of vulnerability is it? Who is impacted? Anyone who might have used Soketi with the cluster driver (or through PM2).

Has the problem been patched? What versions should users upgrade to? Get the latest version of Soketi.

Is there a way for users to fix or remediate the vulnerability without upgrading? None. It's advised to upgrade to the latest version.

Are there any links users can visit to find out more?