Submit #585717: juliangruber @juliangruber/brace-expansion 1.1.11 Inefficient Regular Expression Complexityinfo

Titlejuliangruber @juliangruber/brace-expansion 1.1.11 Inefficient Regular Expression Complexity
Description@juliangruber/brace-expansion@1.1.11 allows context-dependent attackers to cause a regular expression denial of service by embedding maliciously constructed code blocks in the parsed Markdown code.
Source⚠️ gist:https://gist.github.com/mmmsssttt404/37a40ce7d6e5ca604858fe30814d9466 PR:https://github.com/juliangruber/brace-expansion/pull/65
User
 mmmsssttt (UID 85832)
Submission05/28/2025 04:00 AM (2 months ago)
Moderation06/09/2025 08:19 AM (12 days later)
StatusAccepted
VulDB Entry311660 [juliangruber brace-expansion up to 1.1.11/2.0.1/3.0.0/4.0.0 index.js expand redos]
Points16

Do you know our Splunk app?

Download it now for free!