-
Notifications
You must be signed in to change notification settings - Fork 950
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Regression from node 18 CVE-2024-27980 #7026
Comments
Hey @megamisan, thanks for reporting this to us and for creating a detailed report. I was able to reproduce this issue. Reading through the blog post you shared, it looks like this affects the versions of Node.js v18.20.2, 20.12.2, and v21.7.3. I’ll raise this to our engineering team so they can take a look into the issue. A possible workaround for this, as you mentioned, would be to downgrade to a previous version of Node.js. From what I can gather, the ff works: v18.20.2 (not ok) -> 18.20.1 (ok) |
Still running into issues with this error on Pub/Sub while using Node v20.12.2 & Windows 11, not sure if this was thought to be addressed in the fix above ^ |
@ryandn2 New release works for me on the initially reported environment. You should create a new (follow up?) issue with logs. Maybe doing some step debugging over the modified code to get more data. |
Hey @ryandn2, I tried to reproduce this issue again using firebase-tools v13.7.4 with Node.js v20.12.2 on a Windows 10 machine, and no errors were raised when starting the emulators. Also tried using Node.js v21.7.3. It's possible that the cause of the error you encountered is different from the initial report. Could you please create a new issue and share your firebase-debug.log with us so we can investigate what caused the error? |
CVE-2024-27980 prevents pubsub emulator from starting with current code on node 18.20.2. Using 18.20.1 works.
See also: nodejs/node#52554 Release Blog Post
[REQUIRED] Environment info
firebase-tools: 13.7.3
Platform: Windows 11
Node: 18.20.2
Npm: 10.5.0
[REQUIRED] Test case
Create a project with pubsub emulator active.
[REQUIRED] Steps to reproduce
Run
firebase emulators:start
[REQUIRED] Expected behavior
(personal information replaced in output)
[REQUIRED] Actual behavior
(personal information replaced in output)
The text was updated successfully, but these errors were encountered: