Brace Expansion Project: >> Brace Expansion Security Vulnerabilities
index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an expand argument containing many comma characters.
CVSS Score
7.5
EPSS Score
0.005
Published
2018-01-27