Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/02/18 10:38 p.m.•213 views

minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern

Summary minimatch is vulnerable to Regular Expression Denial of Service ReDoS when a glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string. Each compiles to a separate ^/? regex group, and when the match fails, V8's regex engine...

8.7CVSS6.4AI score0.00547EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder