Brace Expansion Project Brace Expansion vulnerabilities

1 vulnerability

Known vulnerabilities in Brace Expansion Project Brace Expansion, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

PrioritiseCVE-2017-18077brace_expansion_project · brace_expansion +2 morebrace_expansion_project brace_expansionindex.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an expand argument containing many comma characters.CVSS7.5HighEPSS2.58%