istanbuljs / babel-plugin-istanbul

A babel plugin that adds istanbul instrumentation to ES6 code
BSD 3-Clause "New" or "Revised" License
616 stars 72 forks source link

Vulnerability in dependency semver:6.3.0 #283

Open ofrolenko opened 1 year ago

ofrolenko commented 1 year ago

I've fount vulnerabilities in npm audit report:

npm audit report

semver <7.5.2 Severity: moderate semver vulnerable to Regular Expression Denial of Service - https://github.com/advisories/GHSA-c2qf-rxjj-qqgw No fix available

│ └─┬ babel-plugin-istanbul@6.1.1 │ └─┬ istanbul-lib-instrument@5.2.1 │ └── semver@6.3.0

Could you fix this in your package?