Read the docs

micromatch

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

micromatch records in CISA KEV

No micromatch vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Picomatch 2 records LOW Braces 1 record MEDIUM Micromatch 1 record LOW Parse-git-config 1 record HIGH Toggle-array 1 record LOW

Records

1 record in Micromatch · all components

TI-2024-03787 CVE-2024-4067 · GHSA-952p-6rrq-rcjv

Regular Expression Denial of Service in micromatch

Priority LOW 33

The NPM package `micromatch` prior to 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01429 Published 2024-05-13 Partial fix · 4.0.8 CWE-1333
Open these records in search →