Vulnerable regex detected by Snyk. Please fix or avoid regex

[wannfq]

https://github.com/DiffSK/configobj/blob/e2ba4457c4651fa54f8d59d8dcdd3da950e956b8/src/configobj/validate.py#L534

[wannfq]

Ref: https://learn.snyk.io/lesson/redos/?_gl=1*1w34pg6*_ga*NzgwNjYzODE3LjE2OTE2NDQ3MDc.*_ga_X9SH3KP7B4*MTY5MjE4NTc5OS4yMS4xLjE2OTIxODU4NjEuMC4wLjA.

[IloBe]

Additional info:

• https://quay.io/repository/eclipse/che-sidecar-go/manifest/sha256:2243f389534abc38938f454e01b6653b88ff19048ec4c3ecc0a66e652cb017d0?tab=vulnerabilities
• with pip-audit lib: configobj 5.0.8 GHSA-c33w-24p9-8m24 Failed to fix configobj (5.0.8): failed to fix dependency configobj (5.0.8), unable to find fix version for vulnerability GHSA-c33w-24p9-8m24

[thebaptiste]

Maintainers seem to be in long holidays, ill, retired or dead... See PR #236 opened by @cdcadman since May 17 on this subject.

[jelmer]

236 is now merged, closing this.

[aarondawg14]

@jelmer Has this been released yet?

[jelmer]

@aarondawg14 no, see the discussion on #237