{"action":"Upgrade braces to 3.0.3 or later.","affected":[{"fixed":"3.0.3","introduced":"0"}],"component":"braces","cve_ids":["CVE-2024-4068"],"ecosystem":"npm","epss":0.01471,"exploited":false,"fixed_versions":["3.0.3"],"ghsa_id":"GHSA-grv7-fg5c-xmjg","id":"tcs_01M5KFSEVQSW8DENYQ0WR25V2X","modified_at":"2026-09-10T03:50:00.374713008Z","published_at":"2024-05-14T18:30:54Z","references":["https://osv.dev/vulnerability/GHSA-grv7-fg5c-xmjg","https://nvd.nist.gov/vuln/detail/CVE-2024-4068","https://github.com/micromatch/braces/issues/35","https://github.com/micromatch/braces/pull/37","https://github.com/micromatch/braces/pull/40","https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff","https://devhub.checkmarx.com/cve-details/CVE-2024-4068","https://github.com/micromatch/braces","https://github.com/micromatch/braces/blob/98414f9f1fabe021736e26836d8306d5de747e0d/lib/parse.js#L308"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-grv7-fg5c-xmjg","url":"https://osv.dev/vulnerability/GHSA-grv7-fg5c-xmjg"}],"summary":"Uncontrolled resource consumption in braces"}