negotiator

1.1.0 · 20 Aug 2026MIT298.1M / weekRepository Homepage npm Atom feed

Your version

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Line	Newest	Where it stands
	1.1.0	No known advisory
	0.6.4	5 open advisories, worst high · last release Oct 2024, no longer updated

High
Regular Expression Denial of Service in negotiatorGHSA-7mc5-chhp-fmc3 · 9 Oct 2018
fixed in 0.6.1

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 4 Nov 2026. Releases and advisories last read 4 Nov 2026.