graphql icon indicating copy to clipboard operation
graphql copied to clipboard

Regular Expression Denial of Service (ReDoS) vulnerability

Open andreeatirgovatu opened this issue 1 year ago • 1 comments

Is there an existing issue that is already proposing this?

  • [X] I have searched the existing issues

Is your feature request related to a problem? Please describe it

yes, we need an upgrade for chokidar package to fix Regular Expression Denial of Service (ReDoS) vulnerability link

Describe the solution you'd like

upgrade chokidar package to fix Regular Expression Denial of Service (ReDoS) link

Teachability, documentation, adoption, migration strategy

No response

What is the motivation / use case for changing the behavior?

fix Regular Expression Denial of Service (ReDoS) vulnerability

andreeatirgovatu avatar May 14 '24 10:05 andreeatirgovatu

Any updates here?

DanielSoCra avatar Jun 21 '24 16:06 DanielSoCra

Chokidar is used exclusively to watch graphql files in order to generate corresponding TS definitions. Its API is not exposed - meaning, you can safely ignore this vulnerability in your project

kamilmysliwiec avatar Jul 02 '24 10:07 kamilmysliwiec