Skip to content
OpenAdvisories

Package · Debian

node-micromatch

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2024-4067

    Regular Expression Denial of Service in micromatch

    The NPM package `micromatch` prior to 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability occurs in `micromatch.braces()` in `index.js` because the pattern `.*` will greedily match anything. By passing a malicious payload, t…

    micromatch micromatch node-micromatch micromatch Debian Ubuntu npm