- Firebase SDK version: <5.0.0 - 5.9.1
node-forge, a dependency of firebase-admin and other Firebase libraries, has a reported ReDOS vulnerability reported February 15, 2018 and described here: digitalbazaar/forge#563
As mentioned in the issue this vulnerability has been fixed in [email protected].