npm/brace-expansion

brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups

Modified: 9/10/2026

ReDoS in brace-expansion

Modified: 11/8/2023

brace-expansion: Zero-step sequence causes process hang and memory exhaustion

Modified: 9/10/2026

brace-expansion: Large numeric range defeats documented `max` DoS protection

Modified: 9/10/2026

brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash

Modified: 9/10/2026

brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

Modified: 9/10/2026

brace-expansion Regular Expression Denial of Service vulnerability

Modified: 9/10/2026