Node Vulnerability

Node 4, 6, 7, and 8 contain a major vulnerability (Constant Hashtable Seeds (CVE pending)) and it is recommended to upgrade as soon as possible

https://nodejs.org/en/blog/vulnerability/july-2017-security-releases/

1 Like

This has been addressed in Meteor 1.5.1.

3 Likes

Is that out already?

Yes, though the CLI hasn’t quite caught up yet. Until it does, you can upgrade manually with

meteor upgrade --release 1.5.1

Close! :slight_smile: The command is actually:

meteor update --release 1.5.1

We will officially mark Meteor 1.5.1 as recommended tomorrow and it will then become the default, but yes, you can update to it now using the above command.

2 Likes

Haha, stupid typo! Thanks for the correction :upside_down_face: