Advisories for Npm/Foreman package

All versions of foreman are vulnerable to Regular Expression Denial of Service when requests to it are made with a specially crafted path.