{"action":"Upgrade braces to 2.3.1 or later.","affected":[{"fixed":"2.3.1","introduced":"2.2.0"}],"component":"braces","cve_ids":["CVE-2018-1109"],"ecosystem":"npm","epss":0.01389,"exploited":false,"fixed_versions":["2.3.1"],"ghsa_id":"GHSA-cwfw-4gq5-mrqx","id":"tcs_01M5KFKT5NRHV5G2G2FKJPCRX2","modified_at":"2025-11-26T17:32:10.727937Z","published_at":"2022-01-06T20:42:03Z","references":["https://osv.dev/vulnerability/GHSA-cwfw-4gq5-mrqx","https://nvd.nist.gov/vuln/detail/CVE-2018-1109","https://github.com/micromatch/braces/commit/abdafb0cae1e0c00f184abbadc692f4eaa98f451","https://bugzilla.redhat.com/show_bug.cgi?id=1547272","https://snyk.io/vuln/npm:braces:20180219"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-cwfw-4gq5-mrqx","url":"https://osv.dev/vulnerability/GHSA-cwfw-4gq5-mrqx"}],"summary":"Regular Expression Denial of Service (ReDoS) in braces"}