mysticatea / npm-run-all

A CLI tool to run multiple npm-scripts in parallel or sequential.

Repository from Github https://github.commysticatea/npm-run-allRepository from Github https://github.commysticatea/npm-run-all

high vulnerability issue in dependent package minimatch

ahernandez111 opened this issue · comments

Description: minimatch package versions before 3.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS). It's possible to cause a denial of service when calling function braceExpand (The regex /{.*}/ is vulnerable and can be exploited).

Solution: Update minimatch version 3.0.4 to 3.0.5.

Vulnerability Link : isaacs/minimatch@a8763f4

Reference: grafana/grafana-image-renderer#329