Node browser runtime release notesRSS

Improvements

• Increase browser extension proxy timeout to better accommodate resource-constrained environments
• Additional error logging

Fixes

• Unblock ensighten.com as a legitimate endpoint

Security patches

• Update Axios

Improvements

• Upgrade Chrome version from 112 to 117

Fixes

• Prevents Module Deny-list bypass via node qualified require statements
• Deny-list "module" module

Fixes

• Adds filter to scrub NR Access Keys and bearer tokens

Security patches

• Pins glob version to remediate CWE-772
• Removes access to VM module

Fixes

• When running in K8 mode, unhealthy Runtimes now exit if they cannot reach SJM's 'Job' endpoint.
• Pinning Yarn to version 2.4.3.
• Truncates script logs to expected size.
• Upgrade base Ubuntu image.
• Set minimum TLS version to accommodate upgraded Ubuntu base image OpenSSL.

Security patches

• CVE-2023-43646
• CVE-2023-46233
• CVE-2023-28155
• CVE-2023-45857

Fixes

• Update got library retry logic to avoid false failures

Security Patches

• CVE-2022-25883
• CVE-2023-26115
• CVE-2022-37614

New Feature

• Allows customers to get screenshots when a simple browser job fails with a status code error

Security Updates

• CVE-2023-32695

Fixes

• Previous fix to remediate urllib vulnerability was rolled back due to errors. Dependency was pinned instead. Resolves CVE-2023-32314.

Security Patches

• CVE-2023-2968
• CVE-2023-32695
• CVE-2023-32314