EUVD-2018-0621

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Minimatch utility vulnerable to ReDoS in pattern parameter affecting versions 3.0.1 and earlier.

Reporter	Title	Published	Views	Family All 28
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Marked, Minimatch and Logback might affect IBM Storage Defender Copy Data Management	26 Sep 202519:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance - Identity Manager Virtual Appliance	30 Jun 202305:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Data Synchronization App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	24 Jul 202417:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerability issues affect IBM Spectrum Conductor 2.5.0	20 Feb 202106:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with Cloud Pak foundational services 4.15.0 shipped with IBM Cloud Pak for Business Automation iFixes for December 2025.	7 Jan 202612:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance is affected by multiple vulnerabilities	26 Mar 202504:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found with third-party libraries used by IBM® MobileFirst Platform	17 Feb 202315:44	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for October 2025.	3 Nov 202522:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerability issues affect IBM Spectrum Symphony 7.3.1	20 Feb 202106:44	–	ibm
Circl	CVE-2016-10540	9 Oct 201800:40	–	circl

[
  {
    "enisaIdVendor": [
      {
        "id": "b496bf1f-4e17-3109-83e1-8cd8ed0858da",
        "vendor": {
          "name": "HackerOne"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "43190814-8777-3e6e-a603-17a8f2f6ff03",
        "product": {
          "name": "minimatch node module"
        },
        "product_version": "≤3.0.1"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-10540
github	www.github.com/advisories/GHSA-hxm2-r34f-qmc5
npmjs	www.npmjs.com/advisories/118
ubuntu	www.ubuntu.com/security/CVE-2016-10540
nodesecurity	www.nodesecurity.io/advisories/118
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.6High risk

Vulners AI Score7.6

CVSS 37.5

CVSS 25

EPSS0.00435

minimatch vulnerability redos javascript regexp