Описание
Withdrawn: ESLint dependencies are vulnerable (ReDoS and Prototype Pollution)
Withdrawn GitHub has withdrawn this advisory in place of GHSA-vh95-rmgr-6w4m and GHSA-6chw-6frg-f759. The reason for withdrawing is that some mistakes were made during the ingestion of CVE-2020-7598 which caused this advisory to be published with incorrect information.
In order to provide accurate advisory information, new advisories were created:
Пакеты
Наименование
minimist
npm
Затронутые версииВерсия исправления
< 1.2.2
1.2.2
Наименование
acorn
npm
Затронутые версииВерсия исправления
< 5.7.4
5.7.4
Наименование
acorn
npm
Затронутые версииВерсия исправления
>= 6.0.0, < 6.4.1
6.4.1
Наименование
acorn
npm
Затронутые версииВерсия исправления
>= 7.0.0, < 7.1.1
7.1.1
Наименование
acorn
npm
Затронутые версииВерсия исправления
>= 7.0.0, < 7.1.1
7.1.1