You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I ran into this issue when I did npm audit, resanitize is using validator of version ~1.5.1, which is vulnerable to regular expression denial of service.
$ npm audit
=== npm audit security report ===
┌──────────────────────────────────────────────────────────────────────────────┐
│ Manual Review │
│ Some vulnerabilities require your attention to resolve │
│ │
│ Visit https://go.npm.me/audit-guide for additional guidance │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ High │ Regular Expression Denial of Service │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ validator │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=3.22.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ hexo-migrator-rss │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ hexo-migrator-rss > feedparser > resanitize > validator │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://npmjs.com/advisories/42 │
└───────────────┴──────────────────────────────────────────────────────────────┘
The text was updated successfully, but these errors were encountered:
0x333333
added a commit
to 0x333333/node-resanitize
that referenced
this issue
Jul 23, 2019
Hi there,
I ran into this issue when I did
npm audit
, resanitize is using validator of version~1.5.1
, which is vulnerable to regular expression denial of service.The text was updated successfully, but these errors were encountered: