ITADN

cross-spawn: regular expression denial of service

#1196Closeddamien-mathieu1 创建于 2025-04-09
D
damien-mathieu1commented
The cross-spawn package is in version 7.0.3. This version contains the [CVE-2024-21538](https://avd.aquasec.com/nvd/cve-2024-21538) The fixed versions are : 7.0.5, 6.0.6 To fix this I suggest to update cross-spawn package to version 7.0.5
关闭于 2025-04-10 3 条评论