GHSA-2w8g-m5j8-7m87: 
JavaScript vulnerability analysis and mitigation

A critical vulnerability (GHSA-2w8g-m5j8-7m87) was identified in the @soketi/soketi npm package, affecting versions prior to 0.26.1. The vulnerability was discovered and published on January 10, 2022, involving a colors package dependency that caused zalgo-like output which resulted in server crashes (GitHub Advisory).

The vulnerability stems from an issue with the colors package dependency, which produced zalgo-like output that interfered with server operations. The issue was specifically related to the colors.js package behavior, leading to server crashes when the affected dependency was called (GitHub Advisory).

The vulnerability primarily affected NPM users who had recently upgraded or installed the NPM package. Notably, Docker users were not affected as their dependencies were bundled at build time and had been tested. The impact resulted in server crashes due to the malformed output (GitHub Advisory).

The vulnerability was patched in version 0.26.1 of @soketi/soketi. No workarounds were available due to the dependency-related nature of the issue, making upgrading to the patched version the only solution (GitHub Advisory).