GHSA-cwfw-4gq5-mrqxLow

Regular Expression Denial of Service (ReDoS) in braces

Published
January 6, 2022
Last Modified
November 26, 2025

🔗 CVE IDs covered (1)

CVE-2018-1109 →

📋 Description

A vulnerability was found in Braces versions from v2.2.0 up to but not including v2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks. This has been patched in version 2.3.1.

🎯 Affected products1

  • npm/braces:>= 2.2.0, < 2.3.1

🔗 References (5)