minimatch ReDoS vulnerability #62

New issue

Closed

opened 2023-05-02 17:57:28 +01:00 by Vylpes · 0 comments

Vylpes commented

2023-05-02 17:57:28 +01:00

Owner

Package: minimatch (npm)
Affected Versions: < 3.0.5
Patched Version: 3.0.5

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service.

Package: `minimatch` (npm) Affected Versions: < 3.0.5 Patched Version: 3.0.5 --- A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service.