# Kbn-ui-shared-deps-npm.dll.js blocked by meraki **URL:** \ **Category:** Kibana\ **Created:** [September 30, 2022, 6:05am UTC](https://discuss.elastic.co/t/kbn-ui-shared-deps-npm-dll-js-blocked-by-meraki/315519 "2022-09-30T06:05:21Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![NashSLX](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nashslx/32/47551_2.png) [@NashSLX](https://discuss.elastic.co/u/NashSLX)\ **Post date:** [September 30, 2022, 6:05am UTC](https://discuss.elastic.co/t/kbn-ui-shared-deps-npm-dll-js-blocked-by-meraki/315519/1 "2022-09-30T06:05:22Z")
Hey everyone! Recently we've been having issues connecting to kibana under some circumstances: ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/6/8661ab2b53c3ee618016e36ec5c169eda6fea917.png) After not seeing anything in the server logs, we realized something seemed to be blocked in the console: ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/e/1e2bf8686a0c57073d4f2c118fc22d85503c05d7.png) And then IT confirmed that it was our Meraki firewall blocking that javascript file: ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/1/f1d1a3d11ef6f2335a447485360f7f1b3fbded46.png) Googling it brought up [this](https://www.npmjs.com/package/kbn-ui-shared-deps) package from npm, which actually claims it was taken down for containing malicious code, but I couldn't find anything in the actual advisories, and I'm not convinced this is the package contained in kibana. Before I ask IT to whitelist this, does anyone have any insight into why this might be happening and if there's an actual security risk? This happens on fresh installs on windows or linux and without any plugins installed. ---
**Author:** ![bhavyarm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavyarm/32/22392_2.png) [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\ **Post date:** [October 7, 2022, 7:28pm UTC](https://discuss.elastic.co/t/kbn-ui-shared-deps-npm-dll-js-blocked-by-meraki/315519/2 "2022-10-07T19:28:44Z")
What is your version of the stack? @tiagocosta / @jbudz can we please get some help here? Thanks, Bhavya ---
**Author:** ![NashSLX](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nashslx/32/47551_2.png) [@NashSLX](https://discuss.elastic.co/u/NashSLX)\ **Post date:** [October 7, 2022, 9:49pm UTC](https://discuss.elastic.co/t/kbn-ui-shared-deps-npm-dll-js-blocked-by-meraki/315519/3 "2022-10-07T21:49:56Z")
Hey! Thanks for taking a look! This happens to us on multiple deployments, most of which are on 7.17.3, however it also happens for a brand new 8.4 cluster. As mentioned we can solve this by whitelisting, but we would obviously still prefer it if we could figure out why this package is being blocked in the fiest place. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [November 4, 2022, 9:49pm UTC](https://discuss.elastic.co/t/kbn-ui-shared-deps-npm-dll-js-blocked-by-meraki/315519/4 "2022-11-04T21:49:58Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed. ---
**Author:** ![tiagocosta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tiagocosta/32/40045_2.png) [@tiagocosta](https://discuss.elastic.co/u/tiagocosta)\ **Post date:** [November 8, 2022, 3:09pm UTC](https://discuss.elastic.co/t/kbn-ui-shared-deps-npm-dll-js-blocked-by-meraki/315519/5 "2022-11-08T15:09:27Z")
Hi, The file `kbn-ui-shared-deps-npm.dll.js` is not an npm package and is a bundle we build as part of the Kibana build with a couple of stateful `node_modules` we use on Kibana. This file is served through a package called `@kbn/ui-shared-deps-npm` which is in the node\_modules folder but its not distributed over the `npm`. We built it locally and ship it as part of the Kibana distributable. On the security side the announcements are available at [Security Announcements - Discuss the Elastic Stack](https://discuss.elastic.co/c/announcements/security-announcements/31) and [Security issues | Elastic](https://www.elastic.co/community/security/) where you can check if a given version should be updated or not. For the ones you mentioned I would advise you to update into `v7.17.7` or `v8.5.0`. Cheers ---
**Author:** ![tiagocosta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tiagocosta/32/40045_2.png) [@tiagocosta](https://discuss.elastic.co/u/tiagocosta)\ **Post date:** [November 8, 2022, 3:14pm UTC](https://discuss.elastic.co/t/kbn-ui-shared-deps-npm-dll-js-blocked-by-meraki/315519/6 "2022-11-08T15:14:14Z")
---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [December 6, 2022, 4:29pm UTC](https://discuss.elastic.co/t/kbn-ui-shared-deps-npm-dll-js-blocked-by-meraki/315519/7 "2022-12-06T16:29:25Z")
---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 3, 2023, 1:00pm UTC](https://discuss.elastic.co/t/kbn-ui-shared-deps-npm-dll-js-blocked-by-meraki/315519/8 "2023-01-03T13:00:28Z")