acorn

8.19.0 · 5 Oct 2026MIT223M / weekRepository npm Atom feed

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Paste your package.json, or type the range you declare for acorn. It is read in your browser and sent nowhere.

Line	Newest	Where it stands
	8.19.0	No known advisory
	7.4.1	No open advisory · last release Oct 2020, no longer updated

Your version

High
Regular Expression Denial of Service in AcornGHSA-6chw-6frg-f759 · 3 Apr 2020
- 7.x7.0.0 – 7.1.0Fixed in 7.1.1
- 6.x6.0.0 – 6.4.0Fixed in 6.4.1
- 5.x5.5.0 – 5.7.3Fixed in 5.7.4

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 27 Oct 2026. Releases and advisories last read 27 Oct 2026.