[mythtv-commits] [MythTV/mythtv] 5a80d9: Security Update: semver vulnerable to Regular Expr...
Peter Bennett
noreply at github.com
Wed Jun 28 00:21:55 UTC 2023
Branch: refs/heads/master
Home: https://github.com/MythTV/mythtv
Commit: 5a80d98ca81298aee5f0b7828181ddf9d69bca21
https://github.com/MythTV/mythtv/commit/5a80d98ca81298aee5f0b7828181ddf9d69bca21
Author: Peter Bennett <pbennett at mythtv.org>
Date: 2023-06-27 (Tue, 27 Jun 2023)
Changed paths:
M mythtv/html/backend/package-lock.json
Log Message:
-----------
Security Update: semver vulnerable to Regular Expression Denial of Service
Versions of the package semver before 7.5.2 are vulnerable to
Regular Expression Denial of Service (ReDoS) via the function
new Range, when untrusted user data is provided as a range.
Updated semver to 7.5.2
More information about the mythtv-commits
mailing list