Skip to content

[Security] Bump @sideway/formula from 3.0.0 to 3.0.1 in /webapp

Bumps @sideway/formula from 3.0.0 to 3.0.1. This update includes a security fix.

Vulnerabilities fixed

@​sideway/formula contains Regular Expression Denial of Service (ReDoS) Vulnerability

Impact

User-provided strings to formula's parser might lead to polynomial execution time.

Patches

Users should upgrade to 3.0.1+.

Workarounds

None.

Patched versions: 3.0.1 Affected versions: < 3.0.1

Commits
Maintainer changes

This version was pushed to npm by marsup, a new releaser for @​sideway/formula since your current version.



Dependabot commands
You can trigger Dependabot actions by commenting on this MR
  • $dependabot rebase will rebase this MR
  • $dependabot recreate will recreate this MR rewriting all the manual changes and resolving conflicts

Merge request reports