markdown-toc icon indicating copy to clipboard operation
markdown-toc copied to clipboard

npm audit moderate vulnerability

Open TrevorSayre opened this issue 6 years ago • 1 comments

underscore.string has a "Regular Expression Denial of Service" vulnerability that is patched in >= 3.3.5

image

Looks like this needs to wait on: https://github.com/jonschlinkert/remarkable/pull/312

TrevorSayre avatar Dec 18 '18 21:12 TrevorSayre

@jonschlinkert: friendly ping :)

XhmikosR avatar Mar 04 '19 09:03 XhmikosR