Lucene search
+L
JonschlinkertMicromatch

1 matches found

CVE
CVE
added 2024/05/13 10:4 a.m.392 views

CVE-2024-4067

CVE-2024-4067 affects the NPM package micromatch prior to 4.0.8. The vulnerability is in micromatch.braces() in index.js, where the pattern .* can cause extreme backtracking (ReDoS) as input grows, leading to hangs or slowdowns. A fix was merged and the issue is noted as mitigated by upgrading to...

5.3CVSS5.3AI score0.01429EPSS
Save