npm/diff: high
Regular Expression Denial of Service (ReDoS)
Action: Upgrade diff to 3.5.0 or later.
npm i diff@3.5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.5.0 | - |
Fixed versions
| 3.5.0 |
Sources
- osv: GHSA-h6ch-v84p-w6p9
- https://github.com/kpdecker/jsdiff/commit/2aec4298639bf30fb88a00b356bf404d3551b8c0
- https://bugzilla.redhat.com/show_bug.cgi?id=1552148
- https://snyk.io/vuln/npm:diff:20180305
- https://www.npmjs.com/advisories/1631
- https://www.whitesourcesoftware.com/vulnerability-database/WS-2018-0590
published · modified · JSON