npm/underscore.string: medium
Regular Expression Denial of Service in underscore.string
Action: Upgrade underscore.string to 3.3.5 or later.
npm i underscore.string@3.3.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.3.5 | - |
Fixed versions
| 3.3.5 |
Sources
- osv: GHSA-v2p6-4mp7-3r9v
- https://github.com/epeli/underscore.string/issues/510
- https://github.com/epeli/underscore.string/pull/517
- https://github.com/epeli/underscore.string/commit/f486cd684c94c12db48b45d52b1472a1b9661029
- https://www.npmjs.com/advisories/745
published · modified · JSON