CVE-2022-3517

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

CVE-2022-3517

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

CVE-2022-3517: Uncontrolled Resource Consumption

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

Minimatch resource management error vulnerability

minimatch is a global matcher in javascript by isaacs personal developer. A security vulnerability exists in minimatch that stems from a Regular Expression Denial of Service ReDoS that occurs when the braceExpand function is called with a specific parameter, resulting in a denial of service...

CVE-2022-3517

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

CVE-2022-3517

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

CVE-2022-3517

CVE-2022-3517 corresponds to a minimatch ReDoS vulnerability in braceExpand. The issue is triggered by specific braceExpand inputs, enabling a Denial of Service with CVSS 3.1 v3.1 base score 7.5 (HIGH). Connected Atlassian Jira entries describe a DoS impact in Jira Software/Data Center, Server (1...

CVE-2022-3517

A vulnerability was found in the nodejs-minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

PT-2022-6598

Name of the Vulnerable Software and Affected Versions minimatch versions 7.19.0 and earlier Confluence Data Center versions prior to 9.1.0 Description A vulnerability was found in the minimatch package, allowing a Regular Expression Denial of Service ReDoS when calling the braceExpand function wi...

Inefficient Regular Expression Complexity in isaacs/minimatch

Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in minimatch. It allows cause a denial of service when calling function braceExpand. The ReDoS vulnerability is mainly due to the regex /./ and can be exploited with the following code. Proof of Concept...

USN-4783-1: minimatch vulnerability

It was discovered that minimatch did not perform necessary bounds checking on regular expressions. An attacker could use this vulnerability to cause a denial of service...

USN-4783-1 node-minimatch vulnerability

It was discovered that minimatch did not perform necessary bounds checking on regular expressions. An attacker could use this vulnerability to cause a denial of service...

PT-2021-27505

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash type of Heap-double-free has been reported. The crash state involves the minimatch destroy function, ofctl parse flow, and ofctl parse target.c...

Denial Of Service (DoS)

minimatch is vulnerable to a Regular Expression Denial Of Service ReDoS attack. An attacker can pass a string value to the minimatchpath,pattern function to cause a ReDoS...

@startdt/textlint-rule-preset-writing (>=1.0.0, <=1.4.0), amdpack (0.0.1) +81 more potentially affected by CVE-2016-10540 via minimatch (3.0.0)

minimatch NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on minimatch and may be impacted: - @startdt/textlint-rule-preset-writing =1.0.0, =1.5.1, =3.1.0, =1.11.0, =0.0.1, =2.0.10, =1.0.10, =1.0.0, =1.0.0, =1.0.3 and more Source cves:...

GHSA-HXM2-R34F-QMC5 Regular Expression Denial of Service in minimatch

Affected versions of minimatch are vulnerable to regular expression denial of service attacks when user input is passed into the pattern argument of minimatchpath, pattern. Proof of Concept js var minimatch = require“minimatch”; // utility function for generating long strings var genstr = functio...

@startdt/textlint-rule-preset-writing (>=1.0.0, <=1.4.0), amdpack (0.0.1) +81 more potentially affected by CVE-2016-10540 via minimatch (3.0.0)

minimatch NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on minimatch and may be impacted: - @startdt/textlint-rule-preset-writing =1.0.0, =1.5.1, =3.1.0, =1.11.0, =0.0.1, =2.0.10, =1.0.10, =1.0.0, =1.0.0, =1.0.3 and more Source cves:...

Regular Expression Denial of Service in minimatch

Affected versions of minimatch are vulnerable to regular expression denial of service attacks when user input is passed into the pattern argument of minimatchpath, pattern. Proof of Concept js var minimatch = require“minimatch”; // utility function for generating long strings var genstr = functio...

CVE-2016-10540

Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript RegExp objects. The primary function, minimatchpath, pattern in Minimatch 3.0.1 and earlier is vulnerable to ReDoS in the pattern parameter...

CVE-2016-10540

Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript RegExp objects. The primary function, minimatchpath, pattern in Minimatch 3.0.1 and earlier is vulnerable to ReDoS in the pattern parameter...