---
title: "ms security advisories"
description: "2 known security advisories for ms, with the versions they affect and the version that fixes each."
url: https://inlinr.com/packages/ms/security
lang: en
---

[Packages](https://inlinr.com/packages)

# ms

2.1.3 · 8 Dec 2020 MIT 721.2M / week [Repository](https://github.com/vercel/ms) [Homepage](https://github.com/vercel/ms#readme) [npm](https://www.npmjs.com/package/ms) [Atom feed](https://inlinr.com/packages/feed/ms)

Your version 

## Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

| Line | Newest | Where it stands                                                            |
| ---- | ------ | -------------------------------------------------------------------------- |
|      | 2.1.3  | No known advisory                                                          |
|      | 1.0.0  | 14 open advisories, worst high  · last release Mar 2017, no longer updated |

- High  
[Regular Expression Denial of Service in ms](https://inlinr.com/advisories/GHSA-3fx5-fwvr-xrjg)GHSA-3fx5-fwvr-xrjg · 24 Oct 2017  
fixed in 0.7.1
- Moderate  
[Vercel ms Inefficient Regular Expression Complexity vulnerability](https://inlinr.com/advisories/GHSA-w9mr-4mfr-499f)GHSA-w9mr-4mfr-499f · 5 Jan 2023

### Quality and security signals

What [npm](https://www.npmjs.com/package/ms) and [deps.dev](https://deps.dev/npm/ms) say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 4 Nov 2026\. Releases and advisories last read 4 Nov 2026.