Description
A vulnerability was found in Braces versions 2.2.0 and above, prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | nodejs-braces | 2.2.0 – < 2.3.1 | 2.3.1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | braces | >= 2.2.0, < 2.3.1 | 2.3.1 | GHSA-cwfw-4gq5-mrqx |