IssueHuntyeoman/update-notifier
The issue has been closed
semver vulnerable to Regular Expression Denial of Service #230
nbouvrette posted onGitHub
https://github.com/advisories/GHSA-c2qf-rxjj-qqgw
Updating semver to the latest version should fix this issue.