{"action":"Upgrade brace-expansion to 1.1.7 or later.","affected":[{"fixed":"1.1.7","introduced":"0"}],"component":"brace-expansion","cve_ids":["CVE-2017-18077"],"ecosystem":"npm","epss":0.0258,"exploited":false,"fixed_versions":["1.1.7"],"ghsa_id":"GHSA-832h-xg76-4gv6","id":"tcs_01M5KFBFEDFW68J01KHRW1VTM4","modified_at":"2023-11-08T03:59:15.193726Z","published_at":"2018-01-29T15:50:46Z","references":["https://osv.dev/vulnerability/GHSA-832h-xg76-4gv6","https://nvd.nist.gov/vuln/detail/CVE-2017-18077","https://github.com/juliangruber/brace-expansion/issues/33","https://github.com/juliangruber/brace-expansion/pull/35","https://github.com/juliangruber/brace-expansion/pull/35/commits/b13381281cead487cbdbfd6a69fb097ea5e456c3","https://bugs.debian.org/862712","https://github.com/advisories/GHSA-832h-xg76-4gv6","https://github.com/juliangruber/brace-expansion","https://www.npmjs.com/advisories/338"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-832h-xg76-4gv6","url":"https://osv.dev/vulnerability/GHSA-832h-xg76-4gv6"}],"summary":"ReDoS in brace-expansion"}