pkg:npm/brace-expansion

4 total CVEsHIGH1MEDIUM2LOW1

✅ Check your installed version

All known vulnerabilities

  • HIGH7.5CVE-2017-18077ReDoS in brace-expansion
    from 0, < 1.1.7
  • MEDIUM6.5CVE-2026-45149brace-expansion: Large numeric range defeats documented `max` DoS protection
    >= 5.0.0, < 5.0.6
  • MEDIUM6.5CVE-2026-33750brace-expansion: Zero-step sequence causes process hang and memory exhaustion
    >= 4.0.0, < 5.0.5
  • LOW3.1CVE-2025-5889brace-expansion Regular Expression Denial of Service vulnerability
    >= 2.0.0, < 2.0.2