Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue (T7445) #4360

Closed
babel-bot opened this issue Jun 19, 2016 · 2 comments
Closed

Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue (T7445) #4360

babel-bot opened this issue Jun 19, 2016 · 2 comments
Labels
outdated A closed issue/PR that is archived due to age. Recommended to make a new issue

Comments

@babel-bot
Copy link
Collaborator

Issue originally made by @arturh85

Bug information

  • Babel version: babel-core@6.9.1

Description

On installing your fine module babel-core@6.9.1 i get the following warning:

npm WARN deprecated minimatch@2.0.10: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue

Sounds serious, could you guys upgrade the module to fix this issue / warning?

Regards,
arturh85
@babel-bot
Copy link
Collaborator Author

Comment originally made by Andy Zhou (zhoulujun88)

i resolve it
you can see here
i hope
http://www.zhoulujun.cn/zhoulujun/html/webfront/ECMAScript/nodejs/7842.html

@danez
Copy link
Member

danez commented Oct 2, 2016

We updated all our dependencies and now using minimatch ^3.0.2

@danez danez closed this as completed Oct 2, 2016
@babel babel locked and limited conversation to collaborators Apr 17, 2017
@hzoo hzoo added the outdated A closed issue/PR that is archived due to age. Recommended to make a new issue label Jul 10, 2018
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
outdated A closed issue/PR that is archived due to age. Recommended to make a new issue
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@danez @hzoo @babel-bot