Uploaded image for project: 'Realm JavaScript SDK'
  1. Realm JavaScript SDK
  2. RJS-997

GCDWebserver Security Vulnerablility

      <!---

      Questions: If you have questions about HOW TO use Realm, please ask on
      StackOverflow: http://stackoverflow.com/questions/ask?tags=realm
      We monitor the realm tag.

      Feature Request: Just fill in the first two sections below.

      Bugs: To help you as fast as possible with an issue please describe your issue
      and the steps you have taken to reproduce it in as much detail as possible.

      -->

      Goals

      Currently the version of GCDWebserver (v3.5.4) that Realm uses has security vulnerabilities, more specifically GCDWebserver is currently using older versions of Bootstrap(v3.1.1) and jQuery(v1.11.0).
      Here are a list of vulnerabilities.

      jQuery (v1.11.0):
      https://nvd.nist.gov/vuln/detail/CVE-2015-9251
      https://nvd.nist.gov/vuln/detail/CVE-2019-11358
      https://nvd.nist.gov/vuln/detail/CVE-2020-11022
      https://nvd.nist.gov/vuln/detail/CVE-2020-11023

      Bootstrap (v3.1.1):
      https://nvd.nist.gov/vuln/detail/CVE-2016-10735
      https://nvd.nist.gov/vuln/detail/CVE-2018-14040
      https://nvd.nist.gov/vuln/detail/CVE-2018-14042
      https://nvd.nist.gov/vuln/detail/CVE-2018-20676
      https://nvd.nist.gov/vuln/detail/CVE-2018-20677
      https://nvd.nist.gov/vuln/detail/CVE-2019-8331

      Expected Results

      Resolve security vulnerability.

      Version of Realm and Tooling

      • Realm JS SDK Version: 10.1.2

            Assignee:
            Unassigned Unassigned
            Reporter:
            unitosyncbot Unito Sync Bot
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: