< 2.12
2.12
tog-Pegasus has a package hash collision DoS vulnerability
Running one of these products? Scan your site to see whether it exposes a vulnerable version.