ms (npm)
Tiny millisecond conversion utility
Advisories
3
Latest version
2.1.3
Released Dec 8, 2020
License
MIT
OpenSSF Scorecard
5.0 / 10
How to fix
Upgrading to 2.0.0 or later clears every advisory below that has a fix.
Upgrade commands
npm
npm install ms@2.1.3yarn
yarn add ms@2.1.3pnpm
pnpm add ms@2.1.3Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-w9mr-4mfr-499f Vercel ms Inefficient Regular Expression Complexity vulnerability |
Medium EPSS 1.02% |
< 2.0.0 | 2.0.0 |
| GHSA-w9mr-4mfr-499f Vercel ms Inefficient Regular Expression Complexity vulnerability |
Medium EPSS 1.02% |
< 2.0.0 | 2.0.0 |
| GHSA-3fx5-fwvr-xrjg Regular Expression Denial of Service in ms |
High EPSS 6.95% |
< 0.7.1 | 0.7.1 |
Source: git+https://github.com/vercel/ms.git
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor