Vulnerability	Vulnerable Version
L Regular Expression Denial of Service (ReDoS) brace-expansion is a Brace expansion as known from sh/bash Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) in the `expand()` function, which is prone to catastrophic backtracking on very long malicious inputs. How to fix Regular Expression Denial of Service (ReDoS)? Upgrade `brace-expansion` to version 1.1.12, 2.0.2, 3.0.1, 4.0.1 or higher.	>=1.0.0 <1.1.12>=2.0.0 <2.0.2>=3.0.0 <3.0.1>=4.0.0 <4.0.1

Regular Expression Denial of Service (ReDoS)

brace-expansion is a Brace expansion as known from sh/bash

Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) in the expand() function, which is prone to catastrophic backtracking on very long malicious inputs.

How to fix Regular Expression Denial of Service (ReDoS)?

Upgrade brace-expansion to version 1.1.12, 2.0.2, 3.0.1, 4.0.1 or higher.

>=1.0.0 <1.1.12>=2.0.0 <2.0.2>=3.0.0 <3.0.1>=4.0.0 <4.0.1

Go back to all versions of this package