Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/25 9:13 p.m.25 views

Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching

Impact picomatch is vulnerable to a method injection vulnerability CWE-1321 affecting the POSIXREGEXSOURCE object. Because the object inherits from Object.prototype, specially crafted POSIX bracket expressions e.g., :constructor: can reference inherited method names. These methods are implicitly...

5.3CVSS6.1AI score0.0041EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder