Skip to content

Commit 9ce0b51

Browse files
authored
micromatch 4.0.8 fix CVE-2024-4067 (hestiacp#4529)
4.0.7 has a ReDOS vulnerability called CVE-2024-4067 , see GHSA-952p-6rrq-rcjv I believe the impact on HestiaCP is low, but the fix is easy. $ npm audit # npm audit report micromatch <4.0.8 Severity: moderate Regular Expression Denial of Service (ReDoS) in micromatch - GHSA-952p-6rrq-rcjv fix available via npm audit fix --force Will install markdownlint-cli2@0.3.2, which is a breaking change node_modules/lint-staged/node_modules/micromatch node_modules/micromatch node_modules/stylelint/node_modules/micromatch markdownlint-cli2 >=0.4.0 Depends on vulnerable versions of micromatch node_modules/markdownlint-cli2 2 moderate severity vulnerabilities Have notified upstream markdownlint-cli2: DavidAnson/markdownlint-cli2#398
1 parent ae82394 commit 9ce0b51

File tree

1 file changed

+6
-8
lines changed

1 file changed

+6
-8
lines changed

package-lock.json

Lines changed: 6 additions & 8 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)