CVE-2026-25547
1 advisory.
npm/@isaacs/brace-expansion CVE-2026-25547: high, EPSS 0.50%
@isaacs/brace-expansion has Uncontrolled Resource Consumption
Action: Upgrade @isaacs/brace-expansion to 5.0.1 or later.
npm i @isaacs/brace-expansion@5.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.1 | - |
Fixed versions
| 5.0.1 |
Sources
- osv: GHSA-7h2j-956f-4vf2
- https://github.com/isaacs/brace-expansion/security/advisories/GHSA-7h2j-956f-4vf2
- https://nvd.nist.gov/vuln/detail/CVE-2026-25547
- https://github.com/isaacs/brace-expansion
CVE-2026-25547 · published · modified · JSON