Advisory Database
  • Advisories
  • Dependency Scanning
  1. npm
  2. ›
  3. @sentry/remix
  4. ›
  5. GHSA-r5w7-f542-q2j4

GHSA-r5w7-f542-q2j4: Potential DoS when using ContextLines integration

January 28, 2025

The ContextLines integration uses readable streams to more efficiently use memory when reading files. The ContextLines integration is used to attach source context to outgoing events.

The stream was not explicitly closed after use. This could lead to excessive amounts of file handles open on the system and potentially lead to a Denial of Service (DoS).

The ContextLines integration is enabled by default in the Node SDK (@sentry/node) and SDKs that run in Node.js environments (@sentry/astro, @sentry/aws-serverless, @sentry/bun, @sentry/google-cloud-serverless, @sentry/nestjs, @sentry/nextjs, @sentry/nuxt, @sentry/remix, @sentry/solidstart, @sentry/sveltekit).

References

  • github.com/advisories/GHSA-r5w7-f542-q2j4
  • github.com/getsentry/sentry-javascript
  • github.com/getsentry/sentry-javascript/issues/14892
  • github.com/getsentry/sentry-javascript/pull/14997
  • github.com/getsentry/sentry-javascript/security/advisories/GHSA-r5w7-f542-q2j4

Code Behaviors & Features

Detect and mitigate GHSA-r5w7-f542-q2j4 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions starting from 8.10.0 before 8.49.0

Fixed versions

  • 8.49.0

Solution

Upgrade to version 8.49.0 or above.

Impact 3.7 LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Learn more about CVSS

Weakness

  • CWE-774: Allocation of File Descriptors or Handles Without Limits or Throttling

Source file

npm/@sentry/remix/GHSA-r5w7-f542-q2j4.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Wed, 14 May 2025 12:16:10 +0000.