All the vulnerabilities related to the version 2.1.5 of the package
Regular Expression Denial of Service in hosted-git-info
The npm package hosted-git-info
before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity