Akaunting #1748

Activity

1. MickLesk

   added

   task

   on Apr 26, 2026
2. MickLesk commented on Apr 26, 2026

   

   MickLesk

   on Apr 26, 2026

   MemberAuthor

   More actions

   Currently removed from Website & Teststate because:

   63 vulnerabilities (15 low, 21 moderate, 25 high, 2 critical)
3. MickLesk

   added

   deferredwontdowontdo

   and removed

   task

   on Apr 26, 2026
4. MickLesk commented on Jul 16, 2026

   

   MickLesk

   on Jul 16, 2026

   MemberAuthor

   More actions

   Not really better....

   websocket-driver  <=0.7.4
   Severity: critical
   websocket-driver: Resource limit bypass via message compression - https://github.com/advisories/GHSA-mp7j-qc5w-4988
   websocket-driver: Message corruption via abuse of protocol length headers - https://github.com/advisories/GHSA-xv26-6w52-cph6
   fix available via `npm audit fix`
   node_modules/websocket-driver
   
   ws  8.0.0 - 8.20.1
   Severity: high
   ws: Memory exhaustion DoS from tiny fragments and data chunks - https://github.com/advisories/GHSA-96hv-2xvq-fx4p
   fix available via `npm audit fix`
   node_modules/ws
   
   82 vulnerabilities (35 low, 28 moderate, 17 high, 2 critical)
   
   To address issues that do not require attention, run:
     npm audit fix
   
   To address all issues possible (including breaking changes), run:
     npm audit fix --force
   
   Some issues need review, and may require choosing
   a different dependency.
   root@akaunting:/opt/akaunting# 
5. MickLesk commented on Jul 27, 2026

   

   MickLesk

   on Jul 27, 2026

   MemberAuthor

   More actions

   No Response yet to my report "Security report: Increasing critical and high-severity npm dependency vulnerabilities in Akaunting 3.x"
6. MickLesk

   closed this as not plannedon Aug 26, 2026