cloudsploit icon indicating copy to clipboard operation
cloudsploit copied to clipboard

Update nodemon to v.2.0.20

Open nuhasha opened this issue 2 years ago • 0 comments

nodemon 1.3.5 - 2.0.16 || 2.0.18 Depends on vulnerable versions of chokidar 1.0.0-rc1 - 2.1.8 that depends on vulnerable versions of glob-parent glob-parent before 5.1.2 vulnerable to Regular Expression Denial of Service in enclosure regex - https://github.com/advisories/GHSA-ww39-953v-wcq6 updating nodemon to v.2.0.20 will update its dependency chokidar and glob-parent

nuhasha avatar Feb 17 '23 17:02 nuhasha