cve-2026-93687-braces

CVE-2026-93687 / GHSA-vfj7-8cjw-p6xm: an independent check This repo verifies, with measurements, the claim in CVE-2026-93687 GHSA-vfj7-8cjw-p6xm that the npm package braces at version 3.0.3 and below is vulnerable to "stack exhaustion through deeply nested patterns" CWE-674, uncontrolled...