SUSE CVE-2026-93687

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

Security Bulletin: Platform Navigator and Automation Assets in IBM Integration are vulnerable to a vulnerability in braces

Summary Platform Navigator and Automation Assets in IBM Integration are vulnerable to a vulnerability in braces. CVE-2026-93687 The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-93687 DESCRIPTION: braces through 3.0.3 contains a stack overflow vulnerability in the recursi...

MGASA-2026-0518 Updated nodejs-braces package fixes a security vulnerability

It was discovered that braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards CVE-2026-93687...

Updated nodejs-braces package fixes a security vulnerability

It was discovered that braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards CVE-2026-93687...

CVE-2026-93687

A flaw was found in braces. This stack overflow vulnerability exists in the recursive Abstract Syntax Tree AST walkers due to a lack of depth guards. A remote attacker can exploit this by supplying deeply nested brace patterns, leading to the exhaustion of the call stack and termination of the...

Linux Distros Unpatched Vulnerability : CVE-2026-93687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace...

GHSA-VFJ7-8CJW-P6XM Withdrawn Advisory: braces vulnerable to stack-exhaustion denial of service through deeply nested patterns

Withdrawn Advisory This advisory has been withdrawn because it's not a practically exploitable vulnerability. This link is maintained to preserve external references. Original Description braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth...

Withdrawn Advisory: braces vulnerable to stack-exhaustion denial of service through deeply nested patterns

Withdrawn Advisory This advisory has been withdrawn because it's not a practically exploitable vulnerability. This link is maintained to preserve external references. Original Description braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth...

Uncontrolled Recursion

Overview org.webjars.npm:braces is a Bash-like brace expansion, implemented in JavaScript. Affected versions of this package are vulnerable to Uncontrolled Recursion in the recursive AST walkers, which lack depth guards. An attacker can supply deeply nested brace patterns that stay within the...

DEBIAN-CVE-2026-93687

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

CVE-2026-93687

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

AZL-103445 CVE-2026-93687 affecting package nodejs-nodemon 2.0.3-5

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

AZL-103481 CVE-2026-93687 affecting package python-tensorboard 2.16.2-6

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

UBUNTU-CVE-2026-93687

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

CVE-2026-93687

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

CVE-2026-93687

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

CVE-2026-93687 braces through 3.0.3 Stack Overflow via Deeply Nested Patterns

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

CVE-2026-93687

CVE-2026-93687 affects the braces library (micromatch) through version 3.0.3 . The vulnerability resides in the recursive AST walkers (in compile.js, parse.js, and expand.js) that lack depth guards. An attacker can supply deeply nested brace patterns under the character limit to exhaust the call ...

PT-2026-99966

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

PT-2026-105542

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...