-
Notifications
You must be signed in to change notification settings - Fork 2
Open
Description
Hi @mooyoul
Could you update the library dependencies to fix the url-regex dependency security issue reported by npm audit ?
# npm audit report
url-regex *
Severity: high
Regular expression denial of service in url-regex - https://github.com/advisories/GHSA-v4rh-8p82-6h5w
fix available via `npm audit fix --force`
Will install webpinfo@1.0.4, which is a breaking change
node_modules/url-regex
webpinfo >=1.1.0
Depends on vulnerable versions of url-regex
node_modules/webpinfo
2 high severity vulnerabilities
To address all issues (including breaking changes), run:
npm audit fix --force
Thanks!
Metadata
Metadata
Assignees
Labels
No labels