Regular Expression Denial of Service

[aalejandromr]

Snyk has a security vulnerability report for word-wrap version 1.2.4 https://security.snyk.io/vuln/SNYK-JS-WORDWRAP-3149973

[bolt-io]

1.2.3 had the vulnerability. It was fixed in #41 and version 1.2.4

[doowb]

Correct, this is fixed in 1.2.4.

@snyk @lirantal when will this be updated?

[lirantal]

Thanks for the ping. I'll share with the security analysts team and get this looked at.

[lirantal]

This should be fixed @1.2.4 as of last Thursday, see here: https://security.snyk.io/vuln/SNYK-JS-WORDWRAP-3149973
Let me know if we're still missing anything.

[doowb]

Thanks!