HIGH7.5
GHSA-jgrx-mgxx-jf9v
tmpl vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion
Quick fix
GHSA-jgrx-mgxx-jf9v — tmpl: upgrade to the fixed version with the command below.
npm install tmpl@1.0.5Details
nodejs-tmpl is simple string formatting. tmpl is vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion.
Are you affected?
Enter the version of the package you're using.