I received a security issue from github last night on my repo which uses documentation:

WS-2018-0590 More information
high severity
Vulnerable versions: < 3.5.0
Patched version: 3.5.0
A vulnerability was found in diff before v3.5.0, the affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.

The more info points to this fix done for v3.5.0
kpdecker/jsdiff@2aec429

The root cause seems to be documentation's dependency on disparity which is using a very old version of diff. I posted the issue on disparity but noticed it hasn't been updated in years. I'm posting the issue here as well so you could track and take appropriate actions. Here's the link to the issue I posted: millermedeiros/disparity#3