Skip to content

Fix minimatch security audit#648

Open
melroy89 wants to merge 1 commit intoisaacs:mainfrom
melroy89:fix_security_audit
Open

Fix minimatch security audit#648
melroy89 wants to merge 1 commit intoisaacs:mainfrom
melroy89:fix_security_audit

Conversation

@melroy89
Copy link
Copy Markdown

minimatch  10.0.0 - 10.2.2
Severity: high
minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments - https://github.com/advisories/GHSA-7r86-cg39-jmmj
minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions - https://github.com/advisories/GHSA-23c5-xmqv-rm74

@luc-LMZ
Copy link
Copy Markdown

luc-LMZ commented Apr 9, 2026

It will be really good to have this merged

@melroy89
Copy link
Copy Markdown
Author

It will be really good to have this merged

I agree of course..

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants