166 matches found
CVE-2026-93687
CVE-2026-93687 affects the braces library (micromatch) through version 3.0.3 . The vulnerability resides in the recursive AST walkers (in compile.js, parse.js, and expand.js) that lack depth guards. An attacker can supply deeply nested brace patterns under the character limit to exhaust the call ...
PT-2026-99971
braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...
PT-2026-95431
Name of the Vulnerable Software and Affected Versions braces versions prior to 3.0.4 Description A stack overflow occurs in the recursive AST Abstract Syntax Tree walkers due to a lack of depth guards. An attacker can provide deeply nested brace patterns that remain within the character limit to...
CVE-2026-93687: Uncontrolled Recursion
braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...
PT-2026-105542
braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...
PT-2026-99966
braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...
Oracle Linux 10 : nodejs22 (ELSA-2026-55541)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55541 advisory. - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 npm/brace-expansion - Fix for CVE-2026-59873 and...
brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...
CLSA-2026-1780879899 TuxCare security update for braces (1 CVE)
TuxCare rebuilt braces to address 1 CVE. Fixed in 3.0.2-tuxcare.1...
CLSA-2026-1777509592 TuxCare security update for braces (1 CVE)
TuxCare rebuilt braces to address 1 CVE. Fixed in 2.3.1-tuxcare.1...
CLSA-2026-1776731778 TuxCare security update for braces (1 CVE)
TuxCare rebuilt braces to address 1 CVE. Fixed in 0.1.5-tuxcare.1...
CLSA-2026-1771546208 TuxCare security update for braces (1 CVE)
TuxCare rebuilt braces to address 1 CVE. Fixed in 2.3.2-tuxcare.1...
CLSA-2026-1771805413 TuxCare security update for braces (1 CVE)
TuxCare rebuilt braces to address 1 CVE. Fixed in 1.8.5-tuxcare.1...
PT-2026-74502
TuxCare rebuilt braces to address 1 CVE. Fixed in 0.1.5-tuxcare.1...
PT-2026-73778
TuxCare rebuilt braces to address 1 CVE. Fixed in 1.8.5-tuxcare.1...
PT-2026-74641
TuxCare rebuilt braces to address 1 CVE. Fixed in 2.3.1-tuxcare.1...
PT-2026-74971
TuxCare rebuilt braces to address 1 CVE. Fixed in 3.0.2-tuxcare.1...
PT-2026-73774
TuxCare rebuilt braces to address 1 CVE. Fixed in 2.3.2-tuxcare.1...
brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...
dovecot: Dovecot: Denial of Service via excessive IMAP bracing
A flaw was found in Dovecot. A remote attacker can exploit this vulnerability by sending excessive open braces over the Internet Message Access Protocol IMAP, leading to uncontrolled memory usage. This can cause the affected system to consume memory up to its configured limit, resulting in a Deni...