← Back

Brace Expansion Project

brace_expansion_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Brace Expansion Project
1Brace Expansion
Nov 21, 2024
Jan 27, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an expand argument containing many comma characters.