Severity
7.5
High severity
Details
- CVSS score
- 7.5
- CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Overview
About vulnerability
Minimatch is a minimal matching utility that works by converting glob expressions into JavaScriptRegExp objects. The primary function, minimatch(path, pattern) in Minimatch 3.0.1 and earlier is vulnerable to ReDoS in the pattern parameter.
Details
- Affected product:
- Acorn , glob , jasmine-npm , minimatch , protractor
- Affected packages:
- minimatch @ 2.0.10 (+18 more)
RegExp objects. The primary function, minimatch(path, pattern) in Minimatch 3.0.1 and earlier is vulnerable to ReDoS in the pattern parameter.