Skip to content

Fix minimatch security audit#648

Open
melroy89 wants to merge 1 commit intoisaacs:mainfrom
melroy89:fix_security_audit
Open

Fix minimatch security audit#648
melroy89 wants to merge 1 commit intoisaacs:mainfrom
melroy89:fix_security_audit

Conversation

@melroy89
Copy link

minimatch  10.0.0 - 10.2.2
Severity: high
minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments - https://github.com/advisories/GHSA-7r86-cg39-jmmj
minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions - https://github.com/advisories/GHSA-23c5-xmqv-rm74

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants