search

amishshah / prism-media

Easily transcode media using Node.js 🎶
https://amishshah.github.io/prism-media
Apache License 2.0
239 stars 53 forks source link

CVE-2022-25345 | Need to update @discordjs/opus dependency #105

Closed fredkilbourn closed 2 years ago

fredkilbourn commented 2 years ago

@discordjs/opus < 0.8.0 is vulnerable to this CVE: GitHub advisory https://github.com/advisories/GHSA-rvgf-69j7-xh78

Please upgrade the opus dependency to correct:

prism-media@1.3.2
├─┬ @discordjs/opus@0.5.3

https://github.com/amishshah/prism-media/blob/main/package.json#L40

Thanks!

amishshah commented 2 years ago

Fixed in v1.3.4