Regular Expression Denial of Service (ReDoS)

Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via analyzeRepeatedExtglob in lib/parse.js, which skips single-branch repeated extglob patterns such as + or +a. An attacker can supply these glob patterns to trigger exponential backtracking i...