WS dependency fails npm audit

[ddavis-hitachi]

• OS and version used: Windows 10
• Node.js version: v14.17.0
• npm version: 6.14.13

After running 'npm audit' in my project I get the following error:

=== npm audit security report ===

┌──────────────────────────────────────────────────────────────────────────────┐ │ Manual Review │ │ Some vulnerabilities require your attention to resolve │ │ │ │ Visit https://go.npm.me/audit-guide for additional guidance │ └──────────────────────────────────────────────────────────────────────────────┘ ┌───────────────┬──────────────────────────────────────────────────────────────┐ │ Moderate │ Regular Expression Denial of Service │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Package │ ws │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Patched in │ >=7.4.6 │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Dependency of │ azure-iothub │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Path │ azure-iothub > azure-iot-amqp-base > ws │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ More info │ https://npmjs.com/advisories/1748 │ └───────────────┴──────────────────────────────────────────────────────────────┘

[anthonyvercolano]

Patch should be going out this coming Monday.

[anthonyvercolano]

@DaveDHitachi Might take an extra day or two. Unless your application is actually creating it's own service as well as being a device, you shouldn't be subject to this vulnerability.

[anthonyvercolano]

Released