Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: ReDos regex vulnerability, reported by @DayShift #660

Merged
merged 4 commits into from
Feb 15, 2025
Merged

Conversation

wolfy1339
Copy link
Member

Verified

This commit was signed with the committer’s verified signature.

Verified

This commit was signed with the committer’s verified signature.
@wolfy1339 wolfy1339 added the Type: Bug Something isn't working as documented label Feb 14, 2025
@wolfy1339 wolfy1339 requested review from gr2m and nickfloyd February 14, 2025 22:50
Copy link
Contributor

👋 Hi! Thank you for this contribution! Just to let you know, our GitHub SDK team does a round of issue and PR reviews twice a week, every Monday and Friday! We have a process in place for prioritizing and responding to your input. Because you are a part of this community please feel free to comment, add to, or pick up any issues/PRs that are labled with Status: Up for grabs. You & others like you are the reason all of this works! So thank you & happy coding! 🚀

Verified

This commit was signed with the committer’s verified signature.

Verified

This commit was signed with the committer’s verified signature.
@gr2m gr2m merged commit e1e4489 into 9.x Feb 15, 2025
7 checks passed
@gr2m gr2m deleted the 9.x-redos-backport branch February 15, 2025 00:08
Copy link
Contributor

🎉 This PR is included in version 9.2.2 🎉

The release is available on:

Your semantic-release bot 📦🚀

@wolfy1339
Copy link
Member Author

@gr2m @nickfloyd Can you update the security advisory with this fixed version

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
released on @9.x Type: Bug Something isn't working as documented
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants