Skip to content
OpenAdvisories

Package · Debian

node-minimatch

6 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.9

    minimatch: potential denial of service via globparts amplification

    minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Starting in 7.0.0 and prior to 11.0.1, src/index.ts implements firstPhasePreProcess() so that, at optimizationLevel 2 or higher, it repeatedly expands atta…