HIGH7.5
GHSA-hpmr-g4pq-jhgp
Denial of service in chrono-node
Quick fix
GHSA-hpmr-g4pq-jhgp — chrono-node: upgrade to the fixed version with the command below.
npm install chrono-node@2.2.4Details
This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces.
Are you affected?
Enter the version of the package you're using.