Commit 9ce0b51
authored
micromatch 4.0.8 fix CVE-2024-4067 (hestiacp#4529)
4.0.7 has a ReDOS vulnerability called CVE-2024-4067 ,
see GHSA-952p-6rrq-rcjv
I believe the impact on HestiaCP is low, but the fix is easy.
$ npm audit # npm audit report
micromatch <4.0.8
Severity: moderate
Regular Expression Denial of Service (ReDoS) in micromatch - GHSA-952p-6rrq-rcjv fix available via npm audit fix --force
Will install markdownlint-cli2@0.3.2, which is a breaking change node_modules/lint-staged/node_modules/micromatch
node_modules/micromatch
node_modules/stylelint/node_modules/micromatch
markdownlint-cli2 >=0.4.0
Depends on vulnerable versions of micromatch
node_modules/markdownlint-cli2
2 moderate severity vulnerabilities
Have notified upstream markdownlint-cli2: DavidAnson/markdownlint-cli2#3981 parent ae82394 commit 9ce0b51
1 file changed
+6
-8
lines changedSome generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
0 commit comments