Giters

microsoft / appcenter-sdk-react-native

Development repository for the App Center SDK for React Native

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Regular Expression Denial of Service in debug

VMBindraban opened this issue · comments

commented

Description

Regular Expression Denial of Service in debug - GHSA-gxpj-cx7g-858c

Seems #743 is back.

Details

  1. Which version of the App Center SDK are you using?
    • 5.0.0
node_modules/appcenter-link-scripts/node_modules/debug
  appcenter-link-scripts  >=2.5.0
  Depends on vulnerable versions of debug
  node_modules/appcenter-link-scripts
    appcenter  >=2.5.0
    Depends on vulnerable versions of appcenter-link-scripts
    node_modules/appcenter
      appcenter-analytics  >=2.5.0
      Depends on vulnerable versions of appcenter
      node_modules/appcenter-analytics
      appcenter-crashes  >=2.5.0
      Depends on vulnerable versions of appcenter
      node_modules/appcenter-crashes
commented

@VMBindraban , thank you for reaching out!
We've already fixed and merged it here #1018.
However, it is not released yet. We will update this thread once the fix is released.

commented

@DmitriyKirakosyan Any idea when the next release is due? as both this and inflight and flagged by snyk:
image

commented

Hello @nathfy this fix available in new 5.0.1 version.