CVE-2017-18077
1 advisory.
npm/brace-expansion CVE-2017-18077: high 7.5
ReDoS in brace-expansion
Action: Upgrade brace-expansion to 1.1.7 or later.
npm i brace-expansion@1.1.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.7 | - |
Fixed versions
| 1.1.7 |
Sources
- osv: GHSA-832h-xg76-4gv6
- https://nvd.nist.gov/vuln/detail/CVE-2017-18077
- https://github.com/juliangruber/brace-expansion/issues/33
- https://github.com/juliangruber/brace-expansion/pull/35
- https://github.com/juliangruber/brace-expansion/pull/35/commits/b13381281cead487cbdbfd6a69fb097ea5e456c3
- https://bugs.debian.org/862712
- https://github.com/advisories/GHSA-832h-xg76-4gv6
- https://github.com/juliangruber/brace-expansion
- https://www.npmjs.com/advisories/338
CVE-2017-18077 · published · modified · JSON