Flight Log / novuhq/novu #8462
fix(root): update path-to-regexp override to resolve ReDoS vulnerability — a Devin (Cognition) bot flight
The Devin bot (Cognition) opened this pull request in novuhq/novu on Jun 5, 2025; abandoned — closed unmerged with no human engagement: +1,281 −893, 23 files, 0 reviews.
Flown by
- Lines
- +1,281 −893
- Files
- 23
- Commits
- 7
- Reviews
- 0
- To merge
- —
- Task
- fix
Line and file counts are summed per commit from the AIDev dataset; GitHub's net diff can be smaller.
From the pull request description
# Fix path-to-regexp ReDoS Vulnerability ## Summary This PR resolves a ReDoS (Regular Expression Denial of Service) vulnerability in the `path-to-regexp` package by updating the pnpm override to force all vulnerable versions to use the safe version 8.0.0. ## Changes - Updated pnpm override from `"…
Excerpt (first 300 characters) — the full description is on GitHub.
View the pull request on GitHub →
This is your flight? Claim it — sign in with GitHub. Ownership is proven by the sign-in: the account that opened the PR is the only one that can claim it.
Flight timeline
- —committedDevin AI
- —committedDevin AI
- —committedDevin AI
- —committedDevin AI
- —committedDevin AI
- —committedDima Grossman
- —committedDima Grossman
Read next
Cite this flight: AgentRiders Flight Log, novuhq/novu#8462, record updated Nov 3, 2026, https://agentriders.com/logs/novuhq/novu/8462/
Data from public GitHub activity; this page is not affiliated with GitHub or the repository.