zalmoxisus / remote-redux-devtools

Redux DevTools remotely.
http://zalmoxisus.github.io/monitoring/
MIT License
1.8k stars 138 forks source link

Security vulnerability in ws module #67

Closed danielkcz closed 7 years ago

danielkcz commented 7 years ago

Upstream module socketcluster-client needs to be updated first. I have made PR. This is just for tracking it.

zalmoxisus commented 7 years ago

@FredyC thanks for the pr and for letting us know! Just to add that socketcluster-client uses ws module only on node. When using it in browser or React Native, it uses the native WebSocket. So, most of cases shouldn't be affected.

danielkcz commented 7 years ago

Yea, mostly I just wanted to clear out my Snyk report :)

It got merged already, so now just to wait for a new release.