es-check
es-check copied to clipboard
Published
20 hours ago •
dollarshaveclub
dollarshaveclub
update acorn version to latest
Requested Update
update acorn version to latest 6 or 7
Why Is This Update Needed?
Vulnerabilities: Regular Expression Denial of Service
Reproduce:
- Just run
npm audit.
Are There Examples Of This Requested Update Elsewhere?
Nothing
This is the output, that audit currently gives, due to es-check requireing acorn 6.1.1:
npm audit
=== npm audit security report ===
┌──────────────────────────────────────────────────────────────────────────────┐
│ Manual Review │
│ Some vulnerabilities require your attention to resolve │
│ │
│ Visit https://go.npm.me/audit-guide for additional guidance │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate │ Regular Expression Denial of Service │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ acorn │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.7.4 <6.0.0 || >=6.4.1 <7.0.0 || >=7.1.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ es-check │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ es-check > acorn │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://npmjs.com/advisories/1488 │
└───────────────┴──────────────────────────────────────────────────────────────┘
found 1 moderate severity vulnerability in 16696 scanned packages
1 vulnerability requires manual review. See the full report for details.
