semver vulnerable to Regular Expression Denial of Service

yeoman / update-notifier

Update notifications for your CLI app

BSD 2-Clause "Simplified" License

1.76k stars 132 forks source link

Closed nbouvrette closed 1 year ago

nbouvrette commented 1 year ago

Updating semver to the latest version should fix this issue.

sindresorhus commented 1 year ago

Done