Lucene search

CVE-2024-4068

🗓️ 15 May 2024 11:32:54Reported by redhat.comType

The 'braces' NPM package is vulnerable to Memory Exhaustion due to uncontrolled character limits in 'lib/parse.js

Reporter	Title	Published	Views	Family All 81
OSV	CGA-jrqh-c82g-rxvm	25 Sep 202405:27	–	osv
OSV	Uncontrolled resource consumption in braces	14 May 202418:30	–	osv
OSV	CGA-w95g-rrw2-66h4	5 Jul 202400:34	–	osv
OSV	CGA-g3x5-7mr7-wr8m	15 Jul 202421:57	–	osv
OSV	CGA-hq78-8245-675v	12 Jun 202408:05	–	osv
OSV	CVE-2024-4068	14 May 202415:42	–	osv
OSV	traefik2-2.11.8-1.1 on GA media	10 Aug 202400:00	–	osv
OSV	traefik-3.1.2-1.1 on GA media	10 Aug 202400:00	–	osv
OSV	Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.19 Security update	15 Oct 202400:24	–	osv
OSV	Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.19 Security update	15 Oct 202400:24	–	osv

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-4068
devhub	www.devhub.checkmarx.com/cve-details/CVE-2024-4068/
github	www.github.com/micromatch/braces/blob/98414f9f1fabe021736e26836d8306d5de747e0d/lib/parse.js
github	www.github.com/micromatch/braces/issues/35
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 May 2024 11:54Current

7.3High risk

Vulners AI Score7.3

CVSS37.5

EPSS0.000

npm package memory exhaustion 'braces'parse.js javascript heap limit