Node API runtime release notesRSS

Features

• Adds Custom Node Modules support for private Job Managers
• Adds universal abuse header to http requests

Fixes

• Fixes bug where customers using a proxy had containers crashing
• Scrubs HAR entry cookie values

New Features

• Shows the customer's website's daysUntilExpiration in the Synthetic Event for Cert Check monitors.

Fixes

• Masks sensitive header values in HAR log

Features

• Added the formdata-node and async modules.
• Added support to release Next Gen Broken Links and Cert Checks

Fixes

• Yarn version update

Security patches

• CVEs related to node-gyp, ssh2-sftp-client, urllib, follow-redirects, and ip

Fixes

• Fixes for future releases of Broken Links monitors and Cert Check monitors
• Re-upgrades SSL-Checker package which was inadvertently downgraded, causing errors for customers

Security patches

• CWE-1333

Fixes

• Reduces Polling frequency for successful requests while in Kubernetes clusters.

Security patches

• CVE-2023-26159
• CWE-1321

New Features

• Adds support for future release of Cert Check monitors.
• Adds support for future release of Broken Links monitors.

Security patches

• CWE-1333

Fixes

• Removes write access to unnecessary paths
• Prevents Node Qualified paths from bypassing the deny/shim logic in the require wall.
• Removes access to the ‘module’ module

Fixes

• When running in K8 mode, unhealthy Runtimes now exit if they cannot reach SJM's 'Job' Endpoint.
• Upgrade base Ubuntu image.

Security patches

• CVE-2023-43646
• CVE-2023-28155