Brace Expansion Project Brace Expansion vulnerabilities

1 known vulnerability affecting brace_expansion_project/brace_expansion.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2017-18077HIGHCVSS 7.5fixed in 1.1.72018-01-27
CVE-2017-18077 [HIGH] CWE-20 CVE-2017-18077: index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDo index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an expand argument containing many comma characters.
nvd