CVE-2018-1109
1 advisory.
npm/braces CVE-2018-1109: low
Regular Expression Denial of Service (ReDoS) in braces
Action: Upgrade braces to 2.3.1 or later.
npm i braces@2.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.2.0 | 2.3.1 | - |
Fixed versions
| 2.3.1 |
Sources
- osv: GHSA-cwfw-4gq5-mrqx
- https://nvd.nist.gov/vuln/detail/CVE-2018-1109
- https://github.com/micromatch/braces/commit/abdafb0cae1e0c00f184abbadc692f4eaa98f451
- https://bugzilla.redhat.com/show_bug.cgi?id=1547272
- https://snyk.io/vuln/npm:braces:20180219
CVE-2018-1109 · published · modified · JSON