VDB
Sign up
HIGH

GHSA-h6ch-v84p-w6p9

Regular Expression Denial of Service (ReDoS)

Quick fix

GHSA-h6ch-v84p-w6p9 — diff: upgrade to the fixed version with the command below.

npm install diff@3.5.0

Details

A vulnerability was found in diff before v3.5.0, the affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/diff
Introduced in: 0Fixed in: 3.5.0
Fixnpm install diff@3.5.0

References