CVE-2024-4067
1 advisory.
npm/micromatch CVE-2024-4067: medium 5.3
Regular Expression Denial of Service (ReDoS) in micromatch
Action: Upgrade micromatch to 4.0.8 or later.
npm i micromatch@4.0.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.8 | - |
Fixed versions
| 4.0.8 |
Sources
- osv: GHSA-952p-6rrq-rcjv
- https://nvd.nist.gov/vuln/detail/CVE-2024-4067
- https://github.com/micromatch/micromatch/issues/243
- https://github.com/micromatch/micromatch/pull/247
- https://github.com/micromatch/micromatch/pull/266
- https://github.com/micromatch/micromatch/commit/03aa8052171e878897eee5d7bb2ae0ae83ec2ade
- https://github.com/micromatch/micromatch/commit/500d5d6f42f0e8dfa1cb5464c6cb420b1b6aaaa0
- https://advisory.checkmarx.net/advisory/CVE-2024-4067
- https://devhub.checkmarx.com/cve-details/CVE-2024-4067
- https://github.com/micromatch/micromatch
- https://github.com/micromatch/micromatch/blob/2c56a8604b68c1099e7bc0f807ce0865a339747a/index.js#L448
- https://github.com/micromatch/micromatch/releases/tag/4.0.8
CVE-2024-4067 · published · modified · JSON