github_osv/GHSA-q5c4-39f5-m68j
Regular Expression Denial of Service in decamelize
Affected versions of `decamelize` are susceptible to a denial of service vulnerability when user input is passed directly into `decamelize`.
## Recommendation
Update to version 1.1.2 or later.
gitlab/npm/decamelize/CVE-2017-16023
Improper Input Validation
Decamelize uses regular expressions to evaluate a string and takes unescaped separator values, which can be used to create a denial of service attack.