# Caver.js / caver-js-ext-kas 의 node-forge 라이브러리 버전 취약점

**URL:** <https://devforum.kaia.io/t/caver-js-caver-js-ext-kas-node-forge/763>\
**Category:** Caver\
**Tags:** caver-js\
**Created:** [3월 18, 2021, 3:31오전 UTC](https://devforum.kaia.io/t/caver-js-caver-js-ext-kas-node-forge/763 "2021-03-18T03:31:20Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![devmasme](https://yyz1.discourse-cdn.com/flex035/user_avatar/devforum.kaia.io/devmasme/32/401_2.png) [@devmasme](https://devforum.kaia.io/u/devmasme)\
**Post date:** [3월 18, 2021, 3:31오전 UTC](https://devforum.kaia.io/t/caver-js-caver-js-ext-kas-node-forge/763/1 "2021-03-18T03:31:20Z")

</div>

caver.js v1.6.0 / caver-js-ext-kas v1.1.1 에서 사용하는 라이브러리인  
node-forge에서 npm audit 시 ‘Prototype Pollution in node-forge’ 메시지로 high 취약점이 발견됩니다.

node-forge의 버전은 \>= 0.10.0 으로 올리면 해결 될 것 같은데 caver, caver-js-ext-kas 라이브러리에 해결 계획이 있을까요…?  
개발자가 해결할 방법이 있을까요?

---

<div class="post-metadata">

**Author:** ![Jamie](https://yyz1.discourse-cdn.com/flex035/user_avatar/devforum.kaia.io/jamie/32/1472_2.png) [@Jamie](https://devforum.kaia.io/u/Jamie)\
**Post date:** [3월 22, 2021, 1:36오전 UTC](https://devforum.kaia.io/t/caver-js-caver-js-ext-kas-node-forge/763/2 "2021-03-22T01:36:26Z")

</div>

안녕하세요. 이슈 리포팅해 주셔서 감사합니다.

현재 caver-js에서 해결될 수 있도록 조치하고 있습니다 🙂  
조치가 완료되면 다시 글 남기겠습니다!

---

<div class="post-metadata">

**Author:** ![Jamie](https://yyz1.discourse-cdn.com/flex035/user_avatar/devforum.kaia.io/jamie/32/1472_2.png) [@Jamie](https://devforum.kaia.io/u/Jamie)\
**Post date:** [3월 23, 2021, 12:23오전 UTC](https://devforum.kaia.io/t/caver-js-caver-js-ext-kas-node-forge/763/3 "2021-03-23T00:23:37Z")

</div>

> [@devmasme](#):
>
> Prototype Pollution in node-forge’ 메시지로 high 취약점이 발

안녕하세요 🙂 [caver-js v1.6.1-rc.1 버전](https://www.npmjs.com/package/caver-js/v/1.6.1-rc.1)이 릴리즈 되었습니다.

`npm install caver-js@1.6.1-rc.1` 이렇게 v1.6.1-rc.1 버전을 다운받아서 사용하시면 됩니다.

또 다른 이슈 있으시면 편하게 말씀해 주세요.  
감사합니다 ! 🙂

---

<div class="post-metadata">

**Author:** ![devmasme](https://yyz1.discourse-cdn.com/flex035/user_avatar/devforum.kaia.io/devmasme/32/401_2.png) [@devmasme](https://devforum.kaia.io/u/devmasme)\
**Post date:** [3월 26, 2021, 8:14오전 UTC](https://devforum.kaia.io/t/caver-js-caver-js-ext-kas-node-forge/763/4 "2021-03-26T08:14:41Z")

</div>

답변 감사합니다!  
caver-js-ext-kas 라이브러리는 대응 계획이 있으실까요?

---

<div class="post-metadata">

**Author:** ![Jamie](https://yyz1.discourse-cdn.com/flex035/user_avatar/devforum.kaia.io/jamie/32/1472_2.png) [@Jamie](https://devforum.kaia.io/u/Jamie)\
**Post date:** [3월 28, 2021, 11:53오후 UTC](https://devforum.kaia.io/t/caver-js-caver-js-ext-kas-node-forge/763/5 "2021-03-28T23:53:55Z")

</div>

아, 네네 caver-js-ext-kas에서 사용하는 caver-js 버전을 올려야 하는데 이것도 동일하게 배포되면 다시 말씀드리겠습니다~

---

<div class="post-metadata">

**Author:** ![Jamie](https://yyz1.discourse-cdn.com/flex035/user_avatar/devforum.kaia.io/jamie/32/1472_2.png) [@Jamie](https://devforum.kaia.io/u/Jamie)\
**Post date:** [3월 29, 2021, 12:33오전 UTC](https://devforum.kaia.io/t/caver-js-caver-js-ext-kas-node-forge/763/6 "2021-03-29T00:33:58Z")

</div>

안녕하세요 [caver-js-ext-kas v1.1.2-rc.1 버전](https://www.npmjs.com/package/caver-js-ext-kas/v/1.1.2-rc.1)이 릴리즈 되었습니다.

`npm install caver-js-ext-kas@1.1.2-rc.1` 이렇게 v1.1.2-rc.1 버전을 다운받아 사용하시면 됩니다.

감사합니다 ~~ 🙂