tocsin

Debian/node-brace-expansion: high 7.5

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCo

Action: Upgrade node-brace-expansion to 2.1.7+~1.1.2-1 or later.

Affected

introducedfixedlast affected
02.1.7+~1.1.2-1-

Fixed versions

2.1.7+~1.1.2-1

Sources

published · modified · JSON