MEDIUM5.3npm
GHSA-3v7f-55p6-f55p· CVE-2026-33672Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching
Modified: 9/10/2026
package
npm/picomatch
pkg:npm/picomatch
HIGH7.5npm
GHSA-c2c7-rcm5-vvqj· CVE-2026-33671Picomatch has a ReDoS vulnerability via extglob quantifiers
Modified: 9/10/2026