cz-conventional-changelog
cz-conventional-changelog copied to clipboard
word-wrap version change not available in NPM but available in Github | word-wrap vulnerable to Regular Expression Denial of Service
The following link shows older version for word-wrap i.e version "word-wrap": "^1.0.3"
The same package has been bumped in the latest master branch of the cz-conventional-changelog
The older version has been flagged to have the following issue:
word-wrap vulnerable to Regular Expression Denial of Service
Reference:
https://github.com/advisories/GHSA-j8xg-fqg3-53r7