pkg:npm/brace-expansion

All known vulnerabilities

• HIGH7.5CVE-2017-18077ReDoS in brace-expansion
  from 0, < 1.1.7
• MEDIUM6.5CVE-2026-45149brace-expansion: Large numeric range defeats documented `max` DoS protection
  >= 5.0.0, < 5.0.6
• MEDIUM6.5CVE-2026-33750brace-expansion: Zero-step sequence causes process hang and memory exhaustion
  >= 4.0.0, < 5.0.5
• MEDIUM5.3brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups
  >= 3.0.0, < 5.0.7
• LOW3.1brace-expansion Regular Expression Denial of Service vulnerability
  >= 2.0.0, < 2.0.2