You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by "JimmyBjorklund (via GitHub)" <gi...@apache.org> on 2025/09/05 11:05:55 UTC
[I] @mapbox/node-pre-gyp@1.0.11 causes lots of deprecated warnings. [pulsar-client-node]
JimmyBjorklund opened a new issue, #431:
URL: https://github.com/apache/pulsar-client-node/issues/431
npm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm warn deprecated npmlog@5.0.1: This package is no longer supported.
npm warn deprecated rimraf@3.0.2: Rimraf versions prior to v4 are no longer supported
npm warn deprecated are-we-there-yet@2.0.0: This package is no longer supported.
npm warn deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm warn deprecated gauge@3.0.2: This package is no longer supported.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] @mapbox/node-pre-gyp@1.0.11 causes lots of deprecated warnings. [pulsar-client-node]
Posted by "andyedwardsibm (via GitHub)" <gi...@apache.org>.
andyedwardsibm commented on issue #431:
URL: https://github.com/apache/pulsar-client-node/issues/431#issuecomment-4143084083
Add CVE-2026-26960 to the ever-expanding list of node-tar vulnerabilities. Looks like https://github.com/apache/pulsar-client-node/pull/462 has fixed it, so is there a timeframe for publishing version 1.17.0?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] @mapbox/node-pre-gyp@1.0.11 causes lots of deprecated warnings. [pulsar-client-node]
Posted by "nassero (via GitHub)" <gi...@apache.org>.
nassero commented on issue #431:
URL: https://github.com/apache/pulsar-client-node/issues/431#issuecomment-3873537511
bumping this. @mapbox/node-pre-gyp < 2.0 now has the following three CVEs due to its usage of an older version of node-tar:
CVE-2026-23950
CVE-2026-24842
CVE-2026-23745
any chance this can get updated?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] @mapbox/node-pre-gyp@1.0.11 causes lots of deprecated warnings. [pulsar-client-node]
Posted by "andyedwardsibm (via GitHub)" <gi...@apache.org>.
andyedwardsibm commented on issue #431:
URL: https://github.com/apache/pulsar-client-node/issues/431#issuecomment-4235957592
https://github.com/apache/pulsar-client-node/releases/tag/v1.17.0 was released 4 days ago
Is there a reason that there's absolute silence on issues relating to security like this one?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org