cross-spawn: regular expression denial of service
The cross-spawn package is in version 7.0.3. This version contains the [CVE-2024-21538](https://avd.aquasec.com/nvd/cve-2024-21538)
The fixed versions are : 7.0.5, 6.0.6
To fix this I suggest to update cross-spawn package to version 7.0.5
关闭于 2025-04-10 3 条评论