-
Notifications
You must be signed in to change notification settings - Fork 935
Open
Labels
questionFurther information is requestedFurther information is requested
Description
Just got notified 'qs' library is marked as a security issue. All qs versions below 6.14.0 are affected. Patched version 6.14.1 apparently is not affected
see for more info: qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion
I was wondering, is this a legitimate issue for using the react-native-community/cli library?
└─┬ @react-native-community/[email protected]
└─┬ @react-native-community/[email protected]
└─┬ [email protected]
└── [email protected]
JaMinsane
Metadata
Metadata
Assignees
Labels
questionFurther information is requestedFurther information is requested