@isaacs/brace-expansion has Uncontrolled Resource Consumption

@isaacs/brace-expansion is a hybrid CJS/ESM TypeScript fork of brace-expansion. Prior to version 5.0.1, @isaacs/brace-expansion is vulnerable to a denial of service (DoS) issue caused by unbounded brace range expansion. When an attacker provides a pattern containing repeated numeric brace ranges, the library attempts to eagerly generate every possible combination synchronously. Because the expansion grows exponentially, even a small input can consume excessive CPU and memory and may crash the Node.js process. This issue has been patched in version 5.0.1.

@isaacs/brace-expansion is a hybrid CJS/ESM TypeScript fork of brace-expansion. Prior to version 5.0.1, @isaacs/brace-expansion is vulnerable to a denial of service (DoS) issue caused by unbounded brace range expansion. When an attacker provides a pattern containing repeated numeric brace ranges, the library attempts to eagerly generate every possible combination synchronously. Because the expansion grows exponentially, even a small input can consume excessive CPU and memory and may crash the Node.js process. This issue has been patched in version 5.0.1.

@isaacs/brace-expansion is a hybrid CJS/ESM TypeScript fork of brace-expansion. Prior to version 5.0.1, @isaacs/brace-expansion is vulnerable to a denial of service (DoS) issue caused by unbounded brace range expansion. When an attacker provides a pattern containing repeated numeric brace ranges, the library attempts to eagerly generate every possible combination synchronously. Because the expansion grows exponentially, even a small input can consume excessive CPU and memory and may crash the Node.js process. This issue has been patched in version 5.0.1.

@isaacs/brace-expansion is a hybrid CJS/ESM TypeScript fork of brace-e ...

Security update for openQA, os-autoinst, openQA-devel-container

Уязвимость библиотеки juliangruber/brace-expansion программной платформы Node.js, позволяющая нарушителю вызвать отказ в обслуживании

Security update for cockpit

Security update for cockpit-machines

Security update for cockpit-podman

Security update for golang-github-prometheus-prometheus

Security update for Prometheus

Security update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions

Important: nodejs:22 security update

Important: nodejs:22 security update

Important: nodejs22 security update

ELSA-2026-7302: nodejs:22 security update (IMPORTANT)

ELSA-2026-7123: nodejs:22 security update (IMPORTANT)

ELSA-2026-7080: nodejs22 security update (IMPORTANT)

Security update 5.0.7 for Multi-Linux Manager Client Tools