---
title: "hosted-git-info security advisories"
description: "1 known security advisory for hosted-git-info, with the versions they affect and the version that fixes each."
url: https://inlinr.com/packages/hosted-git-info/security
lang: en
---

[Packages](https://inlinr.com/packages)

# hosted-git-info

10.1.1 · 18 May 2026 ISC 137M / week [Repository](https://github.com/npm/hosted-git-info) [npm](https://www.npmjs.com/package/hosted-git-info) [Atom feed](https://inlinr.com/packages/feed/hosted-git-info)

Your version 

## Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

| Line | Newest | Where it stands                                                             |
| ---- | ------ | --------------------------------------------------------------------------- |
|      | 10.1.1 | No known advisory                                                           |
|      | 9.0.3  | No known advisory                                                           |
|      | 3.0.8  | 1 open advisory, worst moderate  · last release Jan 2021, no longer updated |

- Moderate  
[Regular Expression Denial of Service in hosted-git-info](https://inlinr.com/advisories/GHSA-43f8-2h32-f4cj)GHSA-43f8-2h32-f4cj · 6 May 2021  
fixed in 3.0.8, 2.8.9

### Quality and security signals

What [npm](https://www.npmjs.com/package/hosted-git-info) and [deps.dev](https://deps.dev/npm/hosted-git-info) say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Reading releases, release notes and advisories…

Registry facts last checked 3 Nov 2026\. Releases and advisories last read 3 Nov 2026.