agutoli / serverless-layers

Serverless.js plugin implementing AWS Lambda Layers, reducing lambda size, warm-up, and deployment time.

MIT License

229 stars 54 forks source link

Update glob-parent to 5.1.2 to fix ReDoS #102

Closed LVSant closed 2 years ago

LVSant commented 2 years ago

Update `glob-parent` to 5.1.2

The latest stable version of serverless-layers that is 2.5.3 is using glob-parent@2.0.0 which is vulnerable to regular expression denial of service.

Please release a new version that is stable (not 2.5.4-beta.1) that contains this fix.

It's a High vulnerability that's impacting users of your library.

agutoli commented 2 years ago

done