search

mysticatea / eslint-plugin-node

Additional ESLint's rules for Node.js
MIT License
958 stars 167 forks source link

bump minimatch version #345

Open Yavorss opened 1 year ago

Yavorss commented 1 year ago

"A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service." Affected versions: < 3.0.5

beInDev commented 1 year ago

+1 please

samrat-ghosh-13 commented 11 months ago

+1

voxpelli commented 10 months ago

eslint-plugin-n is the maintained version of this module.

We switched to it in eg. eslint-config-standard / standard and it is maintained by me and other members of the official ESLint community organization.

Try that module out and if it isn't fixed there, then open a new PR in that project.