Help - Can you confirm which releases contain the fix for addressing the find-my-way vulnerability CVE-2024-45813?

[cjin62]

💬 Question here

a clear and concise description of your question

Can you confirm which releases contain the fix for addressing the find-my-way vulnerability CVE-2024-45813?

// example codes if any

If possible add a link to sample codes for error reproduction (github or replit)

Your Environment

• node version: 10, 12, 13
• fastify version: >=2.0.0
• os: Mac, Windows, Linux
• any other relevant information

[Uzlopak]

First of all, find-my-way is not a fastify specific library.

Second of all, patched versions can be seen in the link of the CVE you posted yourself.

[Eomm]

It is up to your project and setup.

Assuming you have a package-lock.json, run these commands:

npm ls find-my-way
npm update find-my-way --save

[cjin62]

I see - let me get your feedback to my development team - thank you @Eomm