gitlab/npm/string/CVE-2017-16116
Uncontrolled Resource Consumption
The string module is a module that provides extra string operations. The string module is vulnerable to regular expression denial of service when specifically crafted untrusted user input is passed into the underscore or `unescapeHTML` methods.