This repository has been archived by the owner on Nov 4, 2023. It is now read-only.

decode-uri-component <= 0.2.0 DoS #36

Closed

elcreator opened this issue Nov 29, 2022 · 2 comments

elcreator commented Nov 29, 2022

GHSA-w573-4hg7-7wgq

Author

elcreator commented Nov 29, 2022

https://www.npmjs.com/package/snapdragon depends on this

Owner

lydell commented Nov 29, 2022

This package is deprecated.

snapdragon is unmaintained.

Here’s how to get rid of it (most likely): https://github.com/lydell/source-map-resolve#deprecated

lydell closed this as not planned

Gregory-Ledray mentioned this issue

Braces may be vulnerable to DoS attack through snapdragon micromatch/braces#34

Closed

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.