Mailing List Archive

[MythTV/mythtv] 5a80d9: Security Update: semver vulnerable to Regular Expr...
Branch: refs/heads/master
Home: https://github.com/MythTV/mythtv
Commit: 5a80d98ca81298aee5f0b7828181ddf9d69bca21
https://github.com/MythTV/mythtv/commit/5a80d98ca81298aee5f0b7828181ddf9d69bca21
Author: Peter Bennett <pbennett@mythtv.org>
Date: 2023-06-27 (Tue, 27 Jun 2023)

Changed paths:
M mythtv/html/backend/package-lock.json

Log Message:
-----------
Security Update: semver vulnerable to Regular Expression Denial of Service

Versions of the package semver before 7.5.2 are vulnerable to
Regular Expression Denial of Service (ReDoS) via the function
new Range, when untrusted user data is provided as a range.

Updated semver to 7.5.2


_______________________________________________
mythtv-commits mailing list
mythtv-commits@mythtv.org
http://lists.mythtv.org/mailman/listinfo/mythtv-commits