uglifyjs security vulnerability

[Steve]

This is included in 3.12:

Security – Resolved JS vulnerability in minified JS by upgrading to uglifyjs 2.4.24

Could you clarify what the risks for site owners are if they don’t update to 3.12?

[Barry]

Hi there Mike,

Thanks for posting – that’s a valid question to ask.

On our end this was largely a precautionary measure to mitigate the potential for vulnerabilities to enter our production code. We aren’t aware of any actual problems that were created.

To learn more about the nature of the vulnerability please refer to the following advisory:

nodesecurity.io/advisories/39

In this case, our advice is simply that you should update for peace of mind and to benefit from various other bug fixes and enhancements 🙂

I hope that helps, but do let me know if you have further questions.

[Support Droid]

This topic has not been active for quite some time and will now be closed.

If you still need assistance please simply open a new topic (linking to this one if necessary)
and one of the team will be only too happy to help.

[Author]

Posts