Brace Expansion Project vulnerabilities

1 vulnerability

Known vulnerabilities in Brace Expansion Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
PrioritiseCVE-2017-18077brace_expansion_project · brace_expansion +2 morebrace_expansion_project brace_expansionindex.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an expand argument containing many comma characters.CVSS7.5HighEPSS2.58%