github cloudflare/agents @cloudflare/worker-bundler@0.2.2

latest releases: @cloudflare/shell@0.4.2, @cloudflare/voice@0.3.5, @cloudflare/codemode@0.4.4...
3 hours ago

Patch Changes

  • #1961 365ced3 Thanks @agent-think! - fix: eliminate polynomial-time ReDoS in import/export matching. The importExportRegex in rewriteImports and the regex fallback in parseImports matched the import clause with [\w*{}\s,]+ followed by \s+, letting both quantifiers consume the same whitespace and backtrack catastrophically on near-match inputs (import + 10k spaces took ~175s). Clauses are now matched as non-whitespace tokens separated by whitespace and bounded at the next import/export keyword, eliminating both overlapping backtracking and repeated suffix scans while preserving valid imports.

Don't miss a new agents release

NewReleases is sending notifications on new releases.