mirror of
https://github.com/facebook/react-native.git
synced 2025-11-01 09:14:26 +00:00
Summary: `mem` package vulnerability found. > In nodejs-mem before version 4.0.0 there is a memory leak due to old results not being removed from the cache despite reaching maxAge. Exploitation of this can lead to exhaustion of memory and subsequent denial of service. ref: https://github.com/sindresorhus/mem/commit/da4e4398cb27b602de3bd55f746efa9b4a31702b `relay-compiler` depends on that. ``` relay-compiler@6.0.0 └─┬ yargs@9.0.1 └─┬ os-locale@2.1.0 └── mem@1.1.0 ``` Pull Request resolved: https://github.com/facebook/relay/pull/2934 Test Plan: - Tested the Relay compiler briefly on the open source examples project, seems like yargs doesn't error - `js1 build relay --project facebook` - `js1 jest` Reviewed By: alunyov Differential Revision: D18397131 Pulled By: kassens fbshipit-source-id: 8b7fc5e237c7b4ce14ff3809cdd59d243e7c4523