{"action":"Upgrade minimatch to 3.0.5 or later.","affected":[{"fixed":"3.0.5","introduced":"0"}],"component":"minimatch","cve_ids":["CVE-2022-3517"],"ecosystem":"npm","epss":0.02279,"exploited":false,"fixed_versions":["3.0.5"],"ghsa_id":"GHSA-f8q6-p94x-37v3","id":"tcs_01M5KFN1YYH2YJR631R6VFGF6T","modified_at":"2026-09-10T03:49:46.410416632Z","published_at":"2022-10-18T12:00:32Z","references":["https://osv.dev/vulnerability/GHSA-f8q6-p94x-37v3","https://nvd.nist.gov/vuln/detail/CVE-2022-3517","https://github.com/grafana/grafana-image-renderer/issues/329","https://github.com/nodejs/node/issues/42510","https://github.com/isaacs/minimatch/commit/a8763f4388e51956be62dc6025cec1126beeb5e6","https://github.com/isaacs/minimatch","https://lists.debian.org/debian-lts-announce/2023/01/msg00011.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MTEUUTNIEBHGKUKKLNUZSV7IEP6IP3Q3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UM6XJ73Q3NAM5KSGCOKJ2ZIA6GUWUJLK"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-f8q6-p94x-37v3","url":"https://osv.dev/vulnerability/GHSA-f8q6-p94x-37v3"}],"summary":"minimatch ReDoS vulnerability"}