Skip to content

chore: better async derived labels - #19068

Open
Rich-Harris wants to merge 1 commit into
mainfrom
better-async-derived-labels
Open

Rich-Harris wants to merge 1 commit into
mainfrom
better-async-derived-labels

chore: better async derived labels

ee97519
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Oct 22, 2026 in 2s

2 new alerts including 2 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 2 high

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 527 in packages/svelte/src/internal/client/dev/debug.js

See this annotation in the file changed.

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
that depends on
library input
may run slow on strings starting with '$.track_reactivity_loss(' and with many repetitions of '$.track_reactivity_loss(a'.
This
regular expression
that depends on
library input
may run slow on strings starting with '$.track_reactivity_loss(' and with many repetitions of '$.track_reactivity_loss(a'.
This
regular expression
that depends on
library input
may run slow on strings starting with '$.track_reactivity_loss(' and with many repetitions of '$.track_reactivity_loss(a'.
This
regular expression
that depends on
library input
may run slow on strings starting with '$.track_reactivity_loss(' and with many repetitions of '$.track_reactivity_loss(a'.
This
regular expression
that depends on
library input
may run slow on strings starting with '$.track_reactivity_loss(' and with many repetitions of '$.track_reactivity_loss(a'.

Check failure on line 526 in packages/svelte/src/internal/client/dev/debug.js

See this annotation in the file changed.

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
that depends on
library input
may run slow on strings starting with '$.get(' and with many repetitions of '$.get(a'.
This
regular expression
that depends on
library input
may run slow on strings starting with '$.get(' and with many repetitions of '$.get(a'.
This
regular expression
that depends on
library input
may run slow on strings starting with '$.get(' and with many repetitions of '$.get(a'.
This
regular expression
that depends on
library input
may run slow on strings starting with '$.get(' and with many repetitions of '$.get(a'.
This
regular expression
that depends on
library input
may run slow on strings starting with '$.get(' and with many repetitions of '$.get(a'.