🐛 [BUG]: path-to-regexp outputs backtracking regular expressions - https://github.com/advisories/GHSA-9wv6-86v2-598j No fix available

[Samuel-Muriuki]

🐛 bug 描述

I am using [email protected] with [email protected] and getting vulnerabilities notification.

📷 复现步骤 | Recurrence steps

$ npm audit
# npm audit report

path-to-regexp 2.0.0 - 3.2.0
Severity: high
path-to-regexp outputs backtracking regular expressions - GHSA-9wv6-86v2-598j
No fix available
node_modules/@refinedev/antd/node_modules/path-to-regexp
@ant-design/pro-layout <=4.3.2 || 4.7.3 - 7.20.0
Depends on vulnerable versions of path-to-regexp
node_modules/@refinedev/antd/node_modules/@ant-design/pro-layout
**@refinedev/antd ***
Depends on vulnerable versions of @ant-design/pro-layout
node_modules/@refinedev/antd

3 high severity vulnerabilities

Some issues need review, and may require choosing
a different dependency.

$ npm ls path-to-regexp
my-project
├─┬ @refinedev/[email protected]
│ └─┬ @ant-design/[email protected]
│ └── [email protected]
└─┬ @refinedev/[email protected]
└─┬ @refinedev/[email protected] invalid: "1.1.36" from node_modules/@refinedev/devtools
└─┬ [email protected]
└── [email protected]

$ npm ls send
my-project
└─┬ @refinedev/[email protected]
└─┬ @refinedev/[email protected] invalid: "1.1.36" from node_modules/@refinedev/devtools
└─┬ [email protected]
├── [email protected]
└─┬ [email protected]
└── [email protected] deduped

🏞 期望结果 | Expected results

💻 复现代码 | Recurrence code

© 版本信息

• Ant Design Pro 版本: [e.g. 4.0.0]
• umi 版本
• 浏览器环境
• 开发环境 [e.g. mac OS]

🚑 其他信息