npm/acorn: high 7.5
Regular Expression Denial of Service in Acorn
Action: Upgrade acorn to 5.7.4 or later.
npm i acorn@5.7.4npm i acorn@6.4.1npm i acorn@7.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.5.0 | 5.7.4 | - |
| 6.0.0 | 6.4.1 | - |
| 7.0.0 | 7.1.1 | - |
Fixed versions
| 5.7.4 | 6.4.1 | 7.1.1 |
Sources
- osv: GHSA-6chw-6frg-f759
- https://github.com/acornjs/acorn/issues/929
- https://github.com/acornjs/acorn/commit/793c0e569ed1158672e3a40aeed1d8518832b802
- https://snyk.io/vuln/SNYK-JS-ACORN-559469
- https://www.npmjs.com/advisories/1488
published · modified · JSON