Packages / diff / Security

HighVulnerabilityGHSA-h6ch-v84p-w6p9Published 13 Jun 2019

Regular Expression Denial of Service (ReDoS)

Affected · diff

  • < 3.5.0

Fixed in

3.5.0

npm install diff@3.5.0

  1. Affected

    1.0.0 – 3.4.0

    35 releases

  2. Fixed

    3.5.0 – 9.0.0

    20 releases, latest

55 stable releases of diff, oldest to newest.

What happens

A vulnerability was found in diff before v3.5.0, the affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.