Skip to content

[fix] npm audit reporting high severity vulnerability with @koa/router 13.0.0 #186

@cduff

Description

@cduff

Steps to reproduce

$ npm i @koa/router

added 9 packages in 429ms

$ npm audit
# npm audit report

path-to-regexp  0.2.0 - 7.2.0
Severity: high
path-to-regexp outputs backtracking regular expressions - https://github.com/advisories/GHSA-9wv6-86v2-598j
No fix available
node_modules/path-to-regexp
  @koa/router  *
  Depends on vulnerable versions of path-to-regexp
  node_modules/@koa/router

2 high severity vulnerabilities

Some issues need review, and may require choosing
a different dependency.

Solution

Fix by upgrading @koa/router to depend on later version of path-to-regexp?

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions