> It’s important to call out that up until v4 ESLint was vulnerable to a Regular Expression Denial of Service attack (ReDoS).

Oh my god, your vscode/text editor will freeze or crash if your code contain a specially crafted string. What a very import thing to call out.