ROOT-APP-NPM-CVE-2026-26996 CVE-2026-26996 in minimatch - Patched by Root

Root has patched CVE-2026-26996 in the minimatch package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-27904 CVE-2026-27904 in minimatch - Patched by Root

Root has patched CVE-2026-27904 in the minimatch package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-27903 CVE-2026-27903 in minimatch - Patched by Root

Root has patched CVE-2026-27903 in the minimatch package for Root:npm. Multiple fixed versions available...

Astra Linux – Vulnerability in node-minimatch

A vulnerability was discovered in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when the braceExpand function is called with specific arguments, resulting in a denial of service...

Astra Linux – Vulnerability in node-minimatch

Minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and earlier are vulnerable to Regular Expression Denial of Service ReDoS when a glob pattern contains many consecutive wildcards followed by a literal character that does not...

DoS (Denial of Service) minimatch Dependency in Bitbucket Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 9.4.22, 10.2.5, 10.3.0, and 10.4.1 of Bitbucket Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an...

CLSA-2026-1786361876 TuxCare security update for minimatch (2 CVEs)

TuxCare rebuilt minimatch to address 2 CVEs. Fixed in 0.2.5-tuxcare.1...

Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (July 2026 - Part 1 of 2)

Summary Multiple vulnerabilities have been addressed in Data Virtualization on IBM Software Hub. Note that Data Virtualization was named Watson Query on IBM Cloud Pak for Data version 4.8. Vulnerability Details CVEID:CVE-2026-27903 DESCRIPTION: minimatch is a minimal matching utility for converti...

ROOT-APP-NPM-CVE-2022-3517 CVE-2022-3517 in minimatch - Patched by Root

Root has patched CVE-2022-3517 in the minimatch package for Root:npm. Multiple fixed versions available...

CLSA-2026-1776904631 TuxCare security update for minimatch (4 CVEs)

TuxCare rebuilt minimatch to address 4 CVEs. Fixed in 1.0.0-tuxcare.2...

CLSA-2026-1774484503 TuxCare security update for minimatch (18 CVEs)

TuxCare rebuilt minimatch to address 18 CVEs. Fixed in 0.3.0-tuxcare.1...

CLSA-2026-1774484507 TuxCare security update for minimatch (4 CVEs)

TuxCare rebuilt minimatch to address 4 CVEs. Fixed in 3.0.4-tuxcare.1...

CLSA-2026-1774484498 TuxCare security update for minimatch (2 CVEs)

TuxCare rebuilt minimatch to address 2 CVEs. Fixed in 0.0.4-tuxcare.1...

CLSA-2026-1774484506 TuxCare security update for minimatch (19 CVEs)

TuxCare rebuilt minimatch to address 19 CVEs. Fixed in 1.0.0-tuxcare.1...

CLSA-2026-1774484504 TuxCare security update for minimatch (4 CVEs)

TuxCare rebuilt minimatch to address 4 CVEs. Fixed in 0.0.5-tuxcare.1...

CLSA-2026-1773015262 TuxCare security update for minimatch (2 CVEs)

TuxCare rebuilt minimatch to address 2 CVEs. Fixed in 3.1.2-tuxcare.1...

TencentOS Server 4: nodejs-nodemon (TSSA-2026:0762)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0762 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

EUVD-2026-48285

brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash...

openSUSE 16: cockpit / cockpit-bridge / cockpit-devel / cockpit-firewalld / etc (openSUSE-SU-2026:21399-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21399-1 advisory. Security issues fixed: - CVE-2025-13465: lodash: prototype pollution in the .unset and .omit functions can lead to deletion of methods from glob...

CVE-2026-14257

brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand function limits the number of results with a max option default 100,000 but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count und...