Is there a plan to update nodejs version to v16.17.1 in kibana 7.17?

Elastic Stack Kibana
1

As per subject. Would like to request kibana v7.17 to update nodejs to v16.17.1 due to its vulnerability in CVE - CVE-2022-35255 (mitre.org) and CVE - CVE-2022-35256 (mitre.org)

2

You will need to upgrade Kibana to get any fixes like this, we do not backport these sorts of patches once we release a version.

3

@tan_minkee, yes, we have updated Node.js to 16.17.1 in both 8 and 7.17 release lines. You can expect these to land in future patch releases:

1 Like
4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.