
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
github.com/openfaas/nats-queue-worker
NATS Streaming was deprecated in June 2023 by Synadia, and will receive no more updates, including for critical security issues.
Migrate to OpenFaaS Standard for NATS JetStream, learn more:
The queue-worker (Community Edition) processes asynchronous function invocation requests, you can read more about this in the async documentation
Screenshots from keynote / video - find out more over at https://www.openfaas.com/
Parameter | Description | Default |
---|---|---|
write_debug | Print verbose logs | false |
faas_gateway_address | Address of gateway DNS name | gateway |
faas_gateway_port | Port of gateway service | 8080 |
faas_max_reconnect | An integer of the amount of reconnection attempts when the NATS connection is lost | 120 |
faas_nats_address | The host at which NATS Streaming can be reached | nats |
faas_nats_port | The port at which NATS Streaming can be reached | 4222 |
faas_nats_cluster_name | The name of the target NATS Streaming cluster | faas-cluster |
faas_reconnect_delay | Delay between retrying to connect to NATS | 2s |
faas_print_body | Print the body of the function invocation | false |
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.