All the vulnerabilities related to the version 0.0.12 of the package
Improper Input Validation in SocksJS-Node
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20.
Insecure Entropy Source - Math.random() in node-uuid
Affected versions of node-uuid
consistently fall back to using Math.random
as an entropy source instead of crypto
, which may result in guessable UUID's.
Update to version 1.4.4 or later.