CVE-2025-5889
1 advisory.
npm/brace-expansion CVE-2025-5889: low 3.1
brace-expansion Regular Expression Denial of Service vulnerability
Action: Upgrade brace-expansion to 1.1.12 or later.
npm i brace-expansion@2.0.2npm i brace-expansion@1.1.12npm i brace-expansion@3.0.1npm i brace-expansion@4.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.0.2 | - |
| 1.0.0 | 1.1.12 | - |
| 3.0.0 | 3.0.1 | - |
| 4.0.0 | 4.0.1 | - |
Fixed versions
| 2.0.2 | 1.1.12 | 3.0.1 | 4.0.1 |
Sources
- osv: GHSA-v6h2-p8h4-qcjw
- https://nvd.nist.gov/vuln/detail/CVE-2025-5889
- https://github.com/juliangruber/brace-expansion/pull/65/commits/a5b98a4f30d7813266b221435e1eaaf25a1b0ac5
- https://github.com/juliangruber/brace-expansion/commit/0b6a9781e18e9d2769bb2931f4856d1360243ed2
- https://github.com/juliangruber/brace-expansion/commit/15f9b3c75ebf5988198241fecaebdc45eff28a9f
- https://github.com/juliangruber/brace-expansion/commit/36603d5f3599a37af9e85eda30acd7d28599c36e
- https://github.com/juliangruber/brace-expansion/commit/c3c73c8b088defc70851843be88ccc3af08e7217
- https://gist.github.com/mmmsssttt404/37a40ce7d6e5ca604858fe30814d9466
- https://github.com/juliangruber/brace-expansion
- https://vuldb.com/?ctiid.311660
- https://vuldb.com/?id.311660
- https://vuldb.com/?submit.585717
CVE-2025-5889 · published · modified · JSON