newrelic / opensource-website

Source code for New Relic's Opensource site.
https://opensource.newrelic.com
Apache License 2.0
145 stars 93 forks source link

Update Fix msgpackr's conversion of property names to strings can trigger infinite recursion #1062

Closed imhunterand closed 4 months ago

imhunterand commented 4 months ago

When decoding user supplied MessagePack messages, users can trigger stuck threads by crafting messages that keep the decoder stuck in a loop. msgpackr is a fast MessagePack NodeJS/JavaScript implementation. vulnerable on newrelic/opensource-website when decoding user supplied MessagePack messages, users can trigger stuck threads by crafting messages that keep the decoder stuck in a loop.

netlify[bot] commented 4 months ago

Deploy Preview for newrelic-opensource-website ready!

Name Link
Latest commit 282d23ec4edfb76cf3647e91d61bf890266f7295
Latest deploy log https://app.netlify.com/sites/newrelic-opensource-website/deploys/65d0c39afba633000886ed23
Deploy Preview https://deploy-preview-1062--newrelic-opensource-website.netlify.app
Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

github-actions[bot] commented 4 months ago

Netlify Preview Deployment Information

This comment will auto update when your preview build is ready!

gatsby-cloud[bot] commented 4 months ago

:white_check_mark: opensource-website-develop deploy preview ready

github-actions[bot] commented 4 months ago

Netlify Preview Deployment Information

This comment will auto update when your preview build is ready!