CVE-2026-118764

The minimatch library, a utility for converting glob expressions into JavaScript RegExp objects, contains a vulnerability in versions prior to 11.0.1 . In src/index.ts , the firstPhasePreProcess() function repeatedly expands attacker-controlled **/.. pattern segments within a fixpoint loop when o...