Regular Expression Denial of Service in marked dependency
madnight opened this issue · comments
Fabian Beuke commented
Giorgio commented
There is already a Pull Request to fix this:
#188
Can some maintainer merge and release this please?
David Bashford commented
2.5.0 released, thanks for the nudge!
Giorgio commented
Thank you @dbashford ! Just upgraded to 2.5.0 and everything works fine and npm audit vulnerabilities found went to 0.
Ramzi Youssef commented