Описание
Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript RegExp objects. The primary function, minimatch(path, pattern) in Minimatch 3.0.1 and earlier is vulnerable to ReDoS in the pattern parameter.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 3.0.4-3 |
| cosmic | not-affected | 3.0.4-3 |
| devel | not-affected | 3.0.4-3 |
| disco | not-affected | 3.0.4-3 |
| eoan | not-affected | 3.0.4-3 |
| esm-apps-legacy/xenial | released | 1.0.0-1ubuntu0.1~esm2 |
| esm-apps/bionic | not-affected | 3.0.4-3 |
| esm-apps/focal | not-affected | 3.0.4-3 |
| esm-apps/jammy | not-affected | 3.0.4-3 |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript `RegExp` objects. The primary function, `minimatch(path, pattern)` in Minimatch 3.0.1 and earlier is vulnerable to ReDoS in the `pattern` parameter.
Minimatch is a minimal matching utility that works by converting glob ...
Regular Expression Denial of Service in minimatch
EPSS
5 Medium
CVSS2
7.5 High
CVSS3