EUVD-2026-8801

minimatch has ReDoS: matchOne combinatorial backtracking via multiple non-adjacent GLOBSTAR segments...

CVE-2026-27903

minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3, matchOne performs unbounded recursive backtracking when a glob pattern contains multiple non-adjacent GLOBSTAR...

minimatch 安全漏洞

Minimatch is a global matcher in JavaScript developed by Isaacs. Versions prior to 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3 have security vulnerabilities due to unbounded recursive backtracking in the matchOne function, which may lead to denial of service...