Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/02/18 10:38 p.m.192 views

minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern

Summary minimatch is vulnerable to Regular Expression Denial of Service ReDoS when a glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string. Each compiles to a separate ^/? regex group, and when the match fails, V8's regex engine...

8.7CVSS5.3AI score0.00519EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder