bold-commerce / subscriptions-customer-portal

Subscriptions Customer Portal
MIT License
0 stars 3 forks source link

Vulnerable library #8

Open adrianobold opened 2 years ago

adrianobold commented 2 years ago

https://github.com/bold-commerce/subscriptions-customer-portal/blob/272a3b659c4dbb664d8e5601f82b99ad2a94b0f2/package-lock.json#L3941

Regular Expression Denial of Service (ReDoS) [Medium Severity in css-what@3.4.2

introduced by react-scripts@5.0.0 > @svgr/webpack@5.5.0 > @svgr/plugin-svgo@5.5.0 > svgo@1.3.2 > css-select@2.1.0 > css-what@3.4.2

This issue was fixed in versions: 5.0.1

Reference