Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/10/30 11:09 p.m.•5 views

minimatch has potential denial of service via globparts amplification

minimatch 10.2.6 contains an attacker-controlled pattern amplification in firstPhasePreProcess when optimizationLevel = 2. researcher: Reid Downing b1nv0id files: - src/index.ts: 690-770 - src/index.ts: 780-796 issue: input-controlled growth of globParts during first-phase preprocessing, followed...

6.9CVSS5.9AI score0.00291EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2026/10/30 11:09 p.m.•5 views

GHSA-G3HV-75WG-M249 minimatch has potential denial of service via globparts amplification

minimatch 10.2.6 contains an attacker-controlled pattern amplification in firstPhasePreProcess when optimizationLevel = 2. researcher: Reid Downing b1nv0id files: - src/index.ts: 690-770 - src/index.ts: 780-796 issue: input-controlled growth of globParts during first-phase preprocessing, followed...

6.9CVSS5.9AI score0.00291EPSS
SaveExploits0References5
Rows per page
Query Builder