-
Notifications
You must be signed in to change notification settings - Fork 37
Open
Description
npm install @mojojs/core
reports 2 high severity vulnerabilities after installation.
Subsequent npm audit
reports
minimatch <=3.0.4
Severity: high
Regular Expression Denial of Service in minimatch - https://github.com/advisories/GHSA-hxm2-r34f-qmc5
minimatch ReDoS vulnerability - https://github.com/advisories/GHSA-f8q6-p94x-37v3
fix available via `npm audit fix`
node_modules/glob/node_modules/minimatch
glob 3.0.0 - 5.0.14
Depends on vulnerable versions of minimatch
node_modules/glob
2 high severity vulnerabilities
To address all issues, run:
npm audit fix
npm audit fix
does not fix the vulnerabilities.
Please fix the vulnerabilities.
Metadata
Metadata
Assignees
Labels
No labels