Mintplex-Labs/anything-llm
1
0
Fork 0
mirror of https://github.com/Mintplex-Labs/anything-llm.git synced 2026-07-19 22:23:50 -04:00
Code Issues 328 Packages Projects Releases 10 Wiki Activity

[PR #1907] [MERGED] patch docker scount CVE in old express-ws pkg #3825

New Issue
Closed
opened 2026-02-22 18:34:34 -05:00 by yindo · 0 comments
yindo commented 2026-02-22 18:34:34 -05:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/Mintplex-Labs/anything-llm/pull/1907
Author: @timothycarambat
Created: 7/19/2024
Status: ✅ Merged
Merged: 7/19/2024
Merged by: @timothycarambat

Base: master ← Head: patch-express-ws

📝 Commits (3)

📊 Changes

6 files changed (+26 additions, -17 deletions)

View changed files

📝 server/index.js (+1 -1)
📝 server/package.json (+2 -2)
📝 server/utils/agents/aibitat/example/websocket/websock-branding-collab.js (+1 -1)
📝 server/utils/agents/aibitat/example/websocket/websock-multi-turn-chat.js (+1 -1)
📝 server/utils/boot/index.js (+10 -1)
📝 server/yarn.lock (+11 -11)

📄 Description

Pull Request Type

  • ✨ feat
  • 🐛 fix
  • ♻️ refactor
  • 💄 style
  • 🔨 chore
  • 📝 docs

Relevant Issues

Patches CVE reported by Docker Scout for express-ws ws dep. Express-ws is not longer maintained so we forked the repo to bump the sub-module and rebuild the script to be a single file import in CJS.

What is in this change?

Additional Information

Developer Validations

  • I ran yarn lint from the root of the repo & committed changes
  • Relevant documentation has been updated
  • I have tested my code functionality
  • Docker build succeeds locally

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/Mintplex-Labs/anything-llm/pull/1907 **Author:** [@timothycarambat](https://github.com/timothycarambat) **Created:** 7/19/2024 **Status:** ✅ Merged **Merged:** 7/19/2024 **Merged by:** [@timothycarambat](https://github.com/timothycarambat) **Base:** `master` ← **Head:** `patch-express-ws` --- ### 📝 Commits (3) - [`15f4a27`](https://github.com/Mintplex-Labs/anything-llm/commit/15f4a2746d35974e128a6f965a7557fece1555a0) patch CVE in old express-ws pkg - [`f4587a9`](https://github.com/Mintplex-Labs/anything-llm/commit/f4587a9eb1f4ef6a0f9a5b7f90bca691748bfc55) patch workflow - [`b583fec`](https://github.com/Mintplex-Labs/anything-llm/commit/b583fec847dabacd30472e67fd57048199d3ffd1) remove dev-image ### 📊 Changes **6 files changed** (+26 additions, -17 deletions) <details> <summary>View changed files</summary> 📝 `server/index.js` (+1 -1) 📝 `server/package.json` (+2 -2) 📝 `server/utils/agents/aibitat/example/websocket/websock-branding-collab.js` (+1 -1) 📝 `server/utils/agents/aibitat/example/websocket/websock-multi-turn-chat.js` (+1 -1) 📝 `server/utils/boot/index.js` (+10 -1) 📝 `server/yarn.lock` (+11 -11) </details> ### 📄 Description ### Pull Request Type <!-- For change type, change [ ] to [x]. --> - [ ] ✨ feat - [ ] 🐛 fix - [ ] ♻️ refactor - [ ] 💄 style - [x] 🔨 chore - [ ] 📝 docs ### Relevant Issues Patches CVE reported by Docker Scout for express-ws `ws` dep. Express-ws is not longer maintained so we forked the repo to bump the sub-module and rebuild the script to be a single file import in CJS. <!-- Use "resolves #xxx" to auto resolve on merge. Otherwise, please use "connect #xxx" --> ### What is in this change? <!-- Describe the changes in this PR that are impactful to the repo. --> ### Additional Information <!-- Add any other context about the Pull Request here that was not captured above. --> ### Developer Validations <!-- All of the applicable items should be checked. --> - [ ] I ran `yarn lint` from the root of the repo & committed changes - [ ] Relevant documentation has been updated - [ ] I have tested my code functionality - [ ] Docker build succeeds locally --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-02-22 18:34:34 -05:00
yindo closed this issue 2026-02-22 18:34:34 -05:00
yindo changed title from [PR #1907] patch docker scount CVE in old express-ws pkg to [PR #1907] [MERGED] patch docker scount CVE in old express-ws pkg 2026-06-05 15:15:25 -04:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
Desktop
Docker
Integration Request
Integration Request
OS: Linux
OS: Mobile
OS: Windows
UI/UX
blocked
bug
bug
core-team-only
documentation
duplicate
embed-widget
enhancement
feature request
github_actions
good first issue
investigating
needs info / can't replicate
possible bug
pull-request
Mirrored from GitHub Pull Request
 question
stage: specifications
wontfix
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Mintplex-Labs/anything-llm#3825
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?