Priority LOW 39
The brace-expansion library generates arbitrary strings containing a common prefix and suffix.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00491 · Published 2026-09-28 · Partial fix · 5.0.11, 3.0.8 +2 CWE-400
Priority LOW 30
The brace-expansion library generates arbitrary strings containing a common prefix and suffix.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00428 · Published 2026-09-28 · Partial fix · 5.0.12, 3.0.9 +2 CWE-400
Priority LOW 39
The brace-expansion library generates arbitrary strings containing a common prefix and suffix.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00455 · Published 2026-09-28 · Partial fix · 5.0.10, 3.0.7 +2 CWE-400
Priority HIGH 72
The brace-expansion library generates arbitrary strings containing a common prefix and suffix.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00647 · Published 2026-08-03 · Partial fix · 1.1.18, 2.1.4 +2 CWE-400
Priority MEDIUM 40
brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00643 · Published 2026-07-23 · Partial fix · 5.0.8, 3.0.3 +2 CWE-400
Priority MEDIUM 40
brace-expansion through 5.0.6 is vulnerable to denial of service.
CVSS 4.0HIGH 7.7· Network · No auth · No interaction · EPSS 0.00364 · Published 2026-06-30 · Partial fix · 5.0.7, 1.1.16 +1 CWE-400
Priority LOW 33
The brace-expansion library generates arbitrary strings containing a common prefix and suffix.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.003 · Published 2026-05-29 · Partial fix · 5.0.6 CWE-400
Priority LOW 33
The brace-expansion library generates arbitrary strings containing a common prefix and suffix.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00447 · Published 2026-03-27 · Partial fix · 5.0.5, 3.0.2 +2 CWE-400
Priority MEDIUM 45
A vulnerability was found in juliangruber brace-expansion up to 1.1.11/2.0.1/3.0.0/4.0.0.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00611 · Published 2025-06-09 · Partial fix · 1.1.12, 2.0.2 +2 CWE-1333
Priority MEDIUM 45
keypair is a a RSA PEM key generator written in javascript.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.03189 · Published 2021-10-11 · Fixed in 1.0.4 CWE-335
THREATIST.IORead the docs