NodeJS 国家预防机制审计|调试低效正则表达式复杂性漏洞-https://github.com/advisories/GHSA-9vvw-cc9w-f27h

wtlkbnrh 于 2023-01-12 发布在 Node.js

关注(0)|答案(1)|浏览(100)

# npm audit report
debug  <3.1.0
debug Inefficient Regular Expression Complexity vulnerability - https://github.com/advisories/GHSA-9vvw-cc9w-f27h
No fix available
node_modules/body-parser/node_modules/debug
node_modules/express/node_modules/debug
node_modules/finalhandler/node_modules/debug
node_modules/send/node_modules/debug
  body-parser  >=1.12.0
  Depends on vulnerable versions of debug
  node_modules/body-parser
    express  >=3.4.5
    Depends on vulnerable versions of body-parser
    Depends on vulnerable versions of debug
    Depends on vulnerable versions of finalhandler
    Depends on vulnerable versions of send
    Depends on vulnerable versions of serve-static
    node_modules/express
      inversify-express-utils  *
      Depends on vulnerable versions of express
      node_modules/inversify-express-utils
  finalhandler  *
  Depends on vulnerable versions of debug
  node_modules/finalhandler
  send  0.3.0 - 0.18.0
  Depends on vulnerable versions of debug
  node_modules/send
    serve-static  1.1.0 - 1.15.0
    Depends on vulnerable versions of send
    node_modules/serve-static
7 low severity vulnerabilities
Some issues need review, and may require choosing
a different dependency.

没有可用的修复？我能做些什么来修复这个问题。我必须降级软件包吗？这里的确切问题是什么？请有人能帮助我吗？

node.js

来源：https://stackoverflow.com/questions/75079962/npm-audit-debug-inefficient-regular-expression-complexity-vulnerability-http