HIGH7.5npm
GHSA-23c5-xmqv-rm74· CVE-2026-27904minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions
Modified: 9/10/2026
package
npm/minimatch
pkg:npm/minimatch
HIGHnpm
GHSA-3ppc-4f35-3m26· CVE-2026-26996minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern
Modified: 9/10/2026
HIGH7.5npm
GHSA-7r86-cg39-jmmj· CVE-2026-27903minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments
Modified: 9/10/2026
HIGH7.5npm
GHSA-f8q6-p94x-37v3· CVE-2022-3517minimatch ReDoS vulnerability
Modified: 9/10/2026
HIGH7.5npm
GHSA-hxm2-r34f-qmc5· CVE-2016-10540Regular Expression Denial of Service in minimatch
Modified: 11/8/2023