Closed rsanchez closed 1 year ago
https://github.com/advisories/GHSA-c2qf-rxjj-qqgw
Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.
Fixes #475
When release with this?
@ds300 Can we please release this version ?
just released in 7.0.2
https://github.com/advisories/GHSA-c2qf-rxjj-qqgw
Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.
Fixes #475