Regular Expression Denial of Service (ReDoS) Security Vulnerability

electron / get

Download Electron release artifacts

https://npm.im/@electron/get

MIT License

337 stars 106 forks source link

Closed justingatlin-clear closed 1 year ago

justingatlin-clear commented 1 year ago

A ReDoS vulnerability has been discovered in package http-cache-semantics currently being used by get.

Versions of http-cache-semantics < 4.1.1 are affected.

Upgrading got to at least version 12.5.0 will resolve this vulnerability.

erickzhao commented 1 year ago

Duplicate of #242

This repo specifies http-cache-semantics@4.1.1 in the lockfile: