this vuln has been a PITA since the 23rd.... somehow the CVE has not been reclassified, dismissed, or otherwise modified, and multiple people have contacted multiple places to try and amend it.... not much to do but twiddle thumbs
[GHSA-vfj7-8cjw-p6xm] braces vulnerable to stack-exhaustion denial of service through deeply nested patterns by ericcornelissen · Pull Request #10132 · github/advisory-database
Updates Affected products CVSS v3 Comments No version of braces is affected by this. Observe the following two facts: 1) A RangeError in Node.js1 is catchable. 2) The braces API may already throw...
github.com