Eslint-plugin-import: Regular Expression Denial of Service (ReDoS)
I updated to v2.3.0 and low snyk.io returns what the issue title says.
Also this:
Vulnerable module: ms
Introduced through: [email protected] › [email protected] › [email protected] › [email protected]
More info to this vulnerability: https://snyk.io/vuln/npm:ms:20170412
Is there a quick way to fix this?
schoenwaldnils
All 2 comments
Just because there's a vulnerability, does not mean it necessarily affect you. In this case only your own eslint configuration can provide a regular expression, so the risk does not exist.
That said, it'd be ideal to update the dep chain.
ljharb
on 9 Jun 2017
👍3
fixed in v2.5.0 or so
benmosher
on 28 Jun 2017
Was this page helpful?
0 / 5 - 0 ratings
Related issues
ljharb
·
29Comments
JustFly1984
·
41Comments
msuntharesan
·
29Comments
graingert
·
22Comments
ThomasdenH
·
31Comments
Most helpful comment
Just because there's a vulnerability, does not mean it necessarily affect you. In this case only your own eslint configuration can provide a regular expression, so the risk does not exist.
That said, it'd be ideal to update the dep chain.