03-gs-ee-6 (0.3.5), @alauda-fe/dynamic-plugin-sdk-rspack (>=0.0.1-alpha.5, <=0.0.1-alpha.12) +3099 more potentially affected by CVE-2026-14257 +1 more via brace-expansion (>=4.0.0, <=5.0.8)

🗓️ 03 Aug 2026 16:35:32Reported by Vulners OSVType

vulnersosv🔗 security.snyk.io👁 10 Views

brace-expansion NPM package (4.0.0 to 5.0.8) vulnerable to CVE-2026-14257 and CVE-2026-69152 causing DoS.

Reporter	Title	Published	Views	Family All 1072
RedhatCVE	CVE-2026-14257	4 Aug 202610:59	–	redhatcve
RedhatCVE	CVE-2026-69152	3 Aug 202618:14	–	redhatcve
RedHat Linux	Important: Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update	18 Aug 202617:02	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.11 bug fix and security update	25 Aug 202610:00	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.11 security and extras update	25 Aug 202608:29	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.35 bug fix and security update	25 Aug 202609:44	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: rh-podman-desktop security, bug fix, and enhancement update	20 Aug 202616:08	–	redhat
RedHat Linux	brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function	20 Aug 202616:08	–	redhat
RedHat Linux	brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation	20 Aug 202616:08	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.30 bug fix and security update	25 Aug 202609:45	–	redhat

04 Aug 2026 05:26Current

6Medium risk

Vulners AI Score6

CVSS 3.17.5

EPSS0.00623

SSVC

brace-expansion CVE-2026-14257 CVE-2026-69152 transitive dependency NPM package regex ReDoS DoS vulnerability