Skip to content

Solve dependabot issue with minimatch version upgrade #7915

@acwhite211

Description

@acwhite211

Solve the eDoS matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments issue with minimatch version upgrade.

https://github.com/specify/specify7/security/dependabot/183
https://github.com/specify/specify7/security/dependabot/181
https://github.com/specify/specify7/security/dependabot/177

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions