Skip to content
OpenAdvisories

Package · npm

braces

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2024-4068

    Memory Exhaustion in braces

    The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In `lib/parse.js,` if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which wi…

    micromatch braces node-braces braces Debian Ubuntu npm
  • Low —
    CVE-2018-1109

    Regular Expression Denial of Service (ReDoS) in braces

    A vulnerability was found in Braces versions 2.2.0 and above, prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.

    braces npm