hosted-git-info moderate vulnerability

[ammal617]

Hello,

We have noticed a moderate vulnerability regarding a sub-dependancy to jest (hosted-git-info). https://npmjs.com/advisories/1677
Is there a plan to upgrade hosted-git-info to a version that do not have this vulnerability ?

Kind regards

[MrCheater]

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate │ Regular Expression Deinal of Service │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ hosted-git-info │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=3.0.8 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ jest │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ jest > jest-cli > @jest/core > jest-resolve > read-pkg-up > │
│ │ read-pkg > normalize-package-data > hosted-git-info │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1677 │
└───────────────┴──────────────────────────────────────────────────────────────┘

[SimenB]

#11379 (comment)

[github-actions]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.
Please note this issue tracker is not a help forum. We recommend using StackOverflow or our discord channel for questions.