Submit #585717: juliangruber @juliangruber/brace-expansion 1.1.11 Inefficient Regular Expression Complexityinfo

Titlejuliangruber @juliangruber/brace-expansion 1.1.11 Inefficient Regular Expression Complexity
Description@juliangruber/[email protected] allows context-dependent attackers to cause a regular expression denial of service by embedding maliciously constructed code blocks in the parsed Markdown code.
Source⚠️ gist:https://gist.github.com/mmmsssttt404/37a40ce7d6e5ca604858fe30814d9466 PR:https://github.com/juliangruber/brace-expansion/pull/65
User
 mmmsssttt (UID 85832)
Submission05/28/2025 04:00 (1 Year ago)
Moderation06/09/2025 08:19 (12 days later)
StatusAccepted
VulDB entry311660 [juliangruber brace-expansion up to 1.1.11/2.0.1/3.0.0/4.0.0 index.js expand redos]
Points16

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!