search

microsoft / Recognizers-Text

Microsoft.Recognizers.Text provides recognition and resolution of numbers, units, date/time, etc. in multiple languages (ZH, EN, FR, ES, PT, DE, IT, TR, HI, NL. Partial support for JA, KO, AR, SV). Packages available at: https://www.nuget.org/profiles/Recognizers.Text, https://www.npmjs.com/~recognizers.text
MIT License
1.67k stars 429 forks source link

Fix ReDoS in lodash #3118

Closed Lui22 closed 1 year ago

Lui22 commented 1 year ago

Update the lodash.trimend version to fix Regular Expression Denial of Service (ReDoS) in lodash (https://github.com/advisories/GHSA-29mw-wpgm-hmr9)

aurghob commented 1 year ago

Hi,

Thanks for the PR: We needed the update across multiple sub libraries and it was addressed as part of https://github.com/microsoft/Recognizers-Text/pull/3125. Closing as duplicate in favor of mentioned PR.