~ / search / GHSA-f8q6-p94x-37v3

GHSA-f8q6-p94x-37v3

minimatch ReDoS vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2022-3517

Packages

EcosystemPackageAffectedFixed in
npm minimatch < 3.0.5 3.0.5

Details

As written in the advisory (Markdown source, shown as plain text).

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service.

References

External links from the advisory. They lead to third-party sites.