[CVE-2024-4068] Uncontrolled resource consumption found in braces (non-issue, see comments)

[promaldowski15]

Snyk reported a vulnerability in the nodemon 3.1.0 dependency.

Issues with no direct upgrade or patch:
11:08:29 ✗ Uncontrolled resource consumption [High Severity][https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727] in braces@3.0.2
11:08:29 introduced by nodemon@3.1.0 > chokidar@3.5.3 > braces@3.0.2
11:08:29 No upgrade or patch available

https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727

[remy]

See here for details (and frankly I fully support this stand):

paulmillr/chokidar#1314

Going to lock, edit and keep open.

[remy]

I'll close once it's closed off, or dies, upstream.

[remy]

Closing (unplanned/non-issue) - again, you can follow conversations upstream.