Josh Prince

Results 3 issues of Josh Prince

**What**: Remove path-parse 1.0.6 dependency. **Why**: Addresses #3095 (CVE-2021-23343). **How**: `yarn up path-parse --recursive` **Checklist**: - [ ] Documentation N/A - [x] Tests - [ ] Code complete - [...

**Current behavior:** The project depends on path-parse v1.0.6, which is vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time...

bug
needs triage

This tripped me up but I was able to find a solution via #1206. Updating docs accordingly. ______________________________________________________________________ Before submitting the PR make sure the following are checked: - [x]...