High severity vulnerability in nth-check - Regular Expression Denial of Service (ReDoS)

[kis]

Introduced through
@iconscout/[email protected]
Fixed in
[email protected]

https://security.snyk.io/vuln/SNYK-JS-NTHCHECK-1586032

Detailed paths
Introduced through: [email protected] › @iconscout/[email protected] › [email protected] › [email protected] › [email protected]
Fix: No remediation path available.

Security information
Factors contributing to the scoring:
Snyk: CVSS 7.5 - High Severity

NVD: CVSS 7.5 - High Severity

Overview
Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) when parsing crafted invalid CSS nth-checks, due to the sub-pattern \s*(?:([+-]?)\s*(\d+))? in RE_NTH_ELEMENT with quantified overlapping adjacency.

[kis]

@tarunmangukiya @akandeBolaji @ladumorrajani @imzedi hey team! could you please bump svgo dependency to newer version and make a new release to fix this high severity vulnerability found with Snyk? https://security.snyk.io/vuln/SNYK-JS-NTHCHECK-1586032