HIGH 7.5

GHSA-jgrx-mgxx-jf9v

tmpl vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion

Quick fix

GHSA-jgrx-mgxx-jf9v — tmpl: upgrade to the fixed version with the command below.

npm install tmpl@1.0.5

Details

nodejs-tmpl is simple string formatting. tmpl is vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion.

Enter the version of the package you're using.

Introduced in: 0 Fixed in: 1.0.5

Fix npm install tmpl@1.0.5