CPE Details
minimatch Project minimatch 0.2.8 for Node.js
0.2.8
2019-09-20
17h29 +00:00
17h29 +00:00
2019-09-20
17h29 +00:00
17h29 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:minimatch_project:minimatch:0.2.8:*:*:*:*:node.js:*:*
Informations
Vendor
minimatch_projectProduct
minimatchVersion
0.2.8Target Software
node.jsRelated CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service. | 7.5 |
Haute |
||
| Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript `RegExp` objects. The primary function, `minimatch(path, pattern)` in Minimatch 3.0.1 and earlier is vulnerable to ReDoS in the `pattern` parameter. | 7.5 |
Haute |
