Affected versions of this package are vulnerable to Missing Release of Resource after Effective Lifetime when some resources are not freed correctly after being used.
Note:
In the meantime, logdna-agent, a package that depends on inflight, has merged a commit addressing this solely in their package (so it should be fixed in logdna-agent in versions 1.6.5 and later)
Overview
Affected versions of this package are vulnerable to Missing Release of Resource after Effective Lifetime when some resources are not freed correctly after being used.
Note: In the meantime,
logdna-agent
, a package that depends on inflight, has merged a commit addressing this solely in their package (so it should be fixed inlogdna-agent
in versions 1.6.5 and later)Remediation
There is no fixed version for
inflight
.References