High DLA-3271-1 1 CVE

node-minimatch - security update

Published Jan 15, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	node-minimatch	3.0.4-3+deb10u1

Vulnerabilities 1

High 7.5

CVE-2022-3517

minimatch ReDoS vulnerability

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service.

js-jquery nodejs-nodemon minimatch node-minimatch Debian Ubuntu Azure Linux npm

Oct 17, 2022