npm package
word-wrap vulnerabilities by version
The latest release, 1.2.5 (Jul 22, 2023), has no known vulnerabilities. 4% of last week’s 137.3M downloads went to versions with known vulnerabilities. OSV.dev lists 1 advisory for word-wrap; the newest was published on Jun 22, 2023.
npm (opens in a new tab) describes it as “Wrap words to a specified length.”
- Latest release
- 1.2.5
- Jul 22, 2023, no known vulnerabilities
- Downloads last week
- 137.3M
- All versions, from npm
- Advisories on OSV.dev
- 1
- Newest Jun 22, 2023
- Licence
- MIT
Most-downloaded versions last week
From npm’s per-version download counts for the last 7 days, each checked against OSV.dev. Open a version for its advisories and what to upgrade to.
Who is still on a vulnerable word-wrap
4% of last week’s 137.3M word-wrap downloads went to versions with known vulnerabilities.
From npm’s per-version download counts for the last 7 days, each version checked against OSV.dev. The versions checked cover over 99% of downloads.
Release lines
The newest release of each major line, from the registry. word-wrap doesn’t publish support dates we can check.
Newest advisories
The 1 most recently published, with the versions each one affects.
WarningCVE-2023-26115 on OSV.dev (opens in a new tab)GHSA-j8xg-fqg3-53r7
word-wrap vulnerable to Regular Expression Denial of Service
Affects < 1.2.4. Published Jun 22, 2023.
Which word-wrap do you have?
Paste a public GitHub repo or drop your package.json and see every vulnerable, end-of-life or deprecated dependency, with one fix task for your coding agent. Free, no sign-up.
How this page is checked
StackPrism reads every OSV.dev advisory for word-wrap, merges duplicates filed under several ids, and asks OSV.dev which ones affect each version listed. Releases and their dates come from deps.dev, downloads from npm. No AI writes this page: every sentence comes from that data, refreshed every few hours.