CVE-2026-112366

About vulnerability

Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows attackers to block the event loop by supplying single-branch repeated extglob patterns. Attackers can provide globs like +(*) or +(*a), which analyzeRepeatedExtglob in lib/parse.js skips, causing exponential backtracking against short crafted strings and denying service to Node.js applications.

Affected product:

@expo/build-tools , @expo/steps , @pnpm/package-bins , @rnef/tools , AngularJS , ComposioHQ/composio , Next.js , Node.js , React , TanStack/router , Vue , adk-js , aegir , ag-ui-mastra , agents , ai , ai-sdk-workflow , ai-sdk-workflow-harness , airgap-beacon-dapp , airgap-beacon-transport-walletconnect , airgap-beacon-ui , allure-js , analogjs-astro-angular , analogjs-platform , analogjs-storybook-angular , analogjs-vite-plugin-angular , analogjs-vite-plugin-nitro , analogjs-vitest-angular , angular-build , angular-compiler-cli , angular-create , angular-devkit-architect-cli , angular-devkit-build-angular , angular-devkit-build-webpack , angular-devkit-core , angular-devkit-schematics-cli , angular-eslint , angular-eslint-builder , angular-eslint-eslint-plugin , angular-eslint-eslint-plugin-template , angular-eslint-schematics , angular-eslint-test-utils , angular-eslint-utils , angular-localize , angular-pwa , antfu-ni , anymatch , appium-eslint-config-appium-ts , assistant-ui , assistant-ui-react-native , assistant-ui-x-buildutils , astro , astro-expressive-code , astrojs-check , astrojs-cloudflare , astrojs-internal-helpers , astrojs-markdoc , astrojs-markdown-remark , astrojs-mdx , astrojs-netlify , astrojs-node , astrojs-preact , astrojs-react , astrojs-solid-js , astrojs-starlight , astrojs-svelte , astrojs-vercel , astrojs-vue , async-storage , augment-vir-assert , augment-vir-test , ava , aws-cdk , aws-sdk-middleware-sdk-transcribe-streaming , b4a , babel-cli , babel-jest , babel-loader , babel-plugin-remove-graphql-queries , babel-plugin-styled-components , babel-preset-expo , bare-fs , bare-stream , beacon-sdk-taquito-patches , berry , better-auth , better-auth-test-utils , braintrust-otel , braintrust-sdk-javascript , broccoli , browsers , build , builder.io-qwik-city , cache-path , celo-celocli , changesets , changesets-release-utils , chat-adapter-tests , chokidar , clean-webpack-plugin , clerk-astro , clerk-chrome-extension , clerk-clerk-expo , clerk-clerk-js , clerk-expo , clerk-expo-native-components , clerk-expo-passkeys , clerk-nuxt , clerk-tanstack-react-start , clerk-upgrade , client , cloudflare-ai-chat , cloudflare-think , cloudflare-vitest-plugin , commit-analyzer , commitlint-config-patternplate-scoped , commitlint-cz-commitlint , connect-es , copilotkit-react-native , copy-webpack-plugin , core-js-builder , create-assistant-ui , create-factory , create-fumadocs-app , create-instantsearch-app , create-jest , create-react-app , create-react-router , create-sanity , create-strapi , create-strapi-app , create-yarn-workspaces , cspell , cspell-cspell-worker , cspell-eslint-plugin , cspell-gitignore , cspell-glob , cspell-lib , css-loader , css-minimizer-webpack-plugin , cz-cli , dart-sass , datadog-mobile-react-native , datadog-mobile-react-native-apollo-client , datadog-mobile-react-native-babel-plugin , datadog-mobile-react-native-code-push , datadog-mobile-react-native-navigation , datadog-mobile-react-native-openfeature , datadog-mobile-react-native-webview , datadog-mobile-react-navigation , daytona-sdk , daytonaio-sdk , dd-sdk-reactnative , deepagents-acp , deepagentsjs , deepeval , definitelytyped , del , depcheck , dependency-cruiser , deps-resolver , detective-typescript , detective-vue2 , devframes-nuxt , devframes-plugin-assets , devframes-plugin-code-server , devframes-plugin-data-inspector , devframes-plugin-messages , devframes-plugin-og , devframes-plugin-terminals , devframes-vite , devtools , docsearch , documentation , docusaurus-babel , docusaurus-bundler , docusaurus-core , docusaurus-mdx-loader , docusaurus-plugin-content-blog , docusaurus-plugin-content-docs , docusaurus-plugin-content-pages , docusaurus-plugin-css-cascade-layers , docusaurus-plugin-debug , docusaurus-plugin-google-analytics , docusaurus-plugin-google-gtag , docusaurus-plugin-google-tag-manager , docusaurus-plugin-sitemap , docusaurus-plugin-svgr , docusaurus-preset-classic , docusaurus-theme-classic , docusaurus-theme-common , docusaurus-theme-mermaid , docusaurus-theme-search-algolia , docusaurus-utils , docusaurus-utils-validation , dotenvx-dotenvx , dr.pogodin-react-native-fs , dxup-nuxt , eas-cli , ecadlabs-beacon-dapp , ecadlabs-beacon-transport-walletconnect , ecosystem , effect-docgen , effect-doctest , effect-platform-bun , effect-platform-node , effect-platform-node-shared , effect-sql-sqlite-react-native , effect-vitest , elements , elevenlabs-react-native , ember-app-blueprint , embroider-compat , embroider-vite , emotion-native , env-run-path , envelop-rate-limiter , esbuild-sass-plugin , esbuild-visualizer , eslint-config-react-app , eslint-config-universe , eslint-import-resolver-typescript , eslint-plugin-deprecation , eslint-plugin-formatjs , eslint-plugin-import-x , eslint-plugin-jest , eslint-plugin-jsdoc , eslint-plugin-n , eslint-plugin-perfectionist , eslint-plugin-pnpm , eslint-plugin-storybook , eslint-plugin-testing-library , eslint-stylistic , eslint-webpack-plugin , evolution-sdk-devnet , executor , executor-js-codemode-core , executor-js-execution , executor-js-runtime-quickjs , expect , expect-webdriverio , expo , expo-app-intents , expo-apple-authentication , expo-application , expo-asset , expo-audio , expo-auth-session , expo-background-fetch , expo-background-task , expo-build-properties , expo-calendar , expo-camera , expo-cli , expo-clipboard , expo-config , expo-configure-splash-screen , expo-constants , expo-contacts , expo-crypto , expo-dev-client , expo-dev-client-components , expo-dev-launcher , expo-dev-menu , expo-dev-menu-interface , expo-dev-server , expo-dev-tools , expo-device , expo-document-picker , expo-expo-cli , expo-file-system , expo-font , expo-glass-effect , expo-hinge , expo-image , expo-image-loader , expo-keep-awake , expo-linking , expo-local-authentication , expo-localization , expo-location , expo-mail-composer , expo-manifests , expo-media-library , expo-metro-config , expo-metro-file-map , expo-module-scripts , expo-modules-autolinking , expo-modules-core , expo-modules-jsi , expo-modules-test-core , expo-network , expo-notifications , expo-package-manager , expo-plugin-help , expo-prebuild-config , expo-print , expo-pwa , expo-router , expo-router-server , expo-screen-capture , expo-screen-orientation , expo-secure-store , expo-sensors , expo-sharing , expo-splash-screen , expo-sqlite , expo-status-bar , expo-symbols , expo-system-ui , expo-task-manager , expo-template-bare-minimum , expo-template-blank , expo-template-blank-typescript , expo-template-default , expo-template-tabs , expo-tracking-transparency , expo-updates , expo-updates-interface , expo-vector-icons , expo-video , expo-web-browser , expo-webpack-config , expo-widgets , expo-xdl , facebook/jest , farm , fast-glob , fast-glob-v2-api , fdir , file-loader , files-sdk , find-node-modules , find-pkg-ws , find-yarn-workspace-root , findup-sync , flow-api-translator , fly-import , fontaine , fork-ts-checker-webpack-plugin , formatjs-cli-lib , formatjs-unplugin , fs-fingerprint , fuma-cli , fuma-cli-interactive , fumadocs , fumadocs-ai-chat , fumadocs-base-ui , fumadocs-graphql , fumadocs-local-content , fumadocs-local-html , fumadocs-local-md , fumadocs-mdx-remote , fumadocs-obsidian , fumadocs-openapi , fumadocs-python , fumadocs-sanity , fumadocs-satteri , fumadocs-story , fumadocs-twoslash , fumadocs-ui , gateway , gatsby , gatsby-link , gatsby-page-utils , gatsby-plugin-page-creator , gatsby-plugin-react-helmet , gatsby-plugin-sharp , get-it , git-lazy-diff-staged , git-lazy-info , git-lazy-root , git-lazy-spawn , git-root2 , github , globby , google-adk , graphql-config , graphql-hive-cli , graphql-hive-gateway , graphql-hive-plugin-mcp , graphql-inspector , graphql-inspector-audit-command , graphql-inspector-ci , graphql-inspector-cli , graphql-inspector-code-loader , graphql-inspector-commands , graphql-inspector-diff-command , graphql-inspector-docs-command , graphql-inspector-git-loader , graphql-inspector-graphql-loader , graphql-inspector-introspect-command , graphql-inspector-json-loader , graphql-inspector-serve-command , graphql-inspector-similar-command , graphql-inspector-validate-command , graphql-language-service-server , graphql-tools , graphql-tools-code-file-loader , graphql-tools-git-loader , graphql-tools-graphql-file-loader , graphql-tools-jest-transform , graphql-tools-json-file-loader , graphql-tools-load , graphql-tools-load-files , graphql-tools-node-require , graphql-tools-resolvers-composition , graphql-yoga-nestjs , graphql-yoga-nestjs-federation , grunt , grunt-cli , gutenberg , happy-dom , happy-dom-jest-environment , hindsight , html-loader , html-webpack-plugin , http-proxy-middleware , imagemin , imagetools , import , impound , inertiajs-vite , inspect , ipx , jest , jest-changed-files , jest-circus , jest-cli , jest-config , jest-console , jest-core , jest-each , jest-environment , jest-environment-jsdom , jest-environment-jsdom-abstract , jest-environment-node , jest-expect , jest-expo , jest-fake-timers , jest-globals , jest-haste-map , jest-jasmine2 , jest-message-util , jest-mock , jest-phabricator , jest-pnp-resolver , jest-puppeteer-pkg , jest-repl , jest-reporters , jest-resolve , jest-resolve-dependencies , jest-runner , jest-runtime , jest-snapshot , jest-test-result , jest-test-sequencer , jest-transform , jest-util , jest-watch-typeahead , jest-watcher , joshwooding-vite-plugin-react-docgen-typescript , js-liftup , jscodeshift , json-render-react-native , json-schema-to-typescript , kit , language-server , leafygreen-ui , ledger-live , lerna , libnpmdiff , libnpmexec , libnpmfund , libnpmversion , libp2p-interface-compliance-tests , libp2p-interop , liftoff , lingui-cli , lingui-extractor-vue , lingui-loader , lingui-metro-transformer , lingui-vite-plugin , listhen , livekit-react-native , livestore , livestore-adapter-web , livestore-common , livestore-common-cf , livestore-framework-toolkit , livestore-livestore , livestore-sqlite-wasm , livestore-utils , livestore-webmesh , lucide-astro , lucide-react-native , lynx-js-genui , lynx-js-react-rsbuild-plugin , lynx-js-rsbuild-plugin , lynx-js-rspeedy , magic-regexp , manypkg , markdownlint-cli , markdownlint-cli2 , masked-view , mastra , mastra-agent-builder , mastra-agentcore , mastra-agentfs , mastra-ai-sdk , mastra-apple-container , mastra-archil , mastra-arize , mastra-arthur , mastra-astra , mastra-auth , mastra-auth-firebase , mastra-auth-neon , mastra-auth-supabase , mastra-azure , mastra-blaxel , mastra-braintrust , mastra-browser-viewer , mastra-chroma , mastra-clickhouse , mastra-client-js , mastra-cloudflare , mastra-cloudflare-d1 , mastra-cloudflare-sandbox , mastra-code-sdk , mastra-codemod , mastra-connect , mastra-core , mastra-couchbase , mastra-cursor , mastra-datadog , mastra-daytona , mastra-deepeval , mastra-deployer , mastra-deployer-netlify , mastra-deployer-sandbox , mastra-deployer-vercel , mastra-discord , mastra-docker , mastra-dsql , mastra-dynamodb , mastra-e2b , mastra-editor , mastra-elysia , mastra-evals , mastra-express , mastra-factory , mastra-files-sdk , mastra-github-signals , mastra-google-cloud-pubsub , mastra-google-drive , mastra-hono , mastra-inngest , mastra-koa , mastra-lance , mastra-langfuse , mastra-langsmith , mastra-livekit , mastra-loggers , mastra-longmemeval , mastra-mcp , mastra-mcp-docs-server , mastra-mesa , mastra-mongodb , mastra-mysql , mastra-nestjs , mastra-observability , mastra-openai , mastra-opencode , mastra-opensearch , mastra-oracledb , mastra-otel-bridge , mastra-otel-exporter , mastra-parallel , mastra-perplexity , mastra-pinecone , mastra-playground-ui , mastra-posthog , mastra-qdrant , mastra-quickjs , mastra-react , mastra-s3 , mastra-s3vectors , mastra-sentry , mastra-server-adapters-test-suite , mastra-slack , mastra-spanner , mastra-tanstack-start , mastra-tavily , mastra-teams , mastra-temporal , mastra-turso , mastra-valkey , mastra-valkey-streams , mastra-vectorize , mastra-vercel , mastra-weaviate , mastracode , mdx-js-rollup , medplum , medplum-cli , medplum-eslint-config , mem-fs-editor , metalsmith , metalsmith-in-place , metamask-core , metamask-snaps-jest , metro , metro-config , metro-file-map , metro-transform-worker , micromatch , microsoft-rush , microsoft-rush-lib , mikro-orm , mikro-orm-core , mikro-orm-mariadb , mikro-orm-mssql , mikro-orm-mysql , mikro-orm-postgresql , mikro-orm-reflection , mikro-orm-sqlite , mini-css-extract-plugin , miniapps , minimizer-webpack-plugin , mobile-wallet-adapter , mocha , modelcontextprotocol-codemod , modern-js-adapter-rstest , modern-js-app-tools , modern-js-builder , modern-js-image , modern-js-plugin-bff , modern-js-plugin-styled-components , modern-js-runtime , modern-node-polyfills , module-federation-core , module-federation-devtools , module-federation-nextjs-mf , module-federation/core , module-federation/vite , mui-x , mui-x-codemod , my-bad , mysten-docs , mysten-walletconnect-wallet , native-html-css-processor , native-html-transient-render-engine , nde , neo4j-graphql , neostandard , nestjs-cls , nestjs-mercurius , nestjs/graphql , netlify-build , netlify-dev , netlify-functions-dev , netlify-functions-utils , netlify-images , netlify-vite-plugin , netlify-zip-it-and-ship-it , nft , ng-packagr , ngrx-eslint-plugin , ngtools-webpack , nitro , node-archiver , npm , npm-check-updates , npm-init2 , npm-lifecycle , npm-package-json-lint , npm-package-json-loader , npm-run-all2 , npm:@pnpm/exec.lifecycle , npm:@pnpm/exec.prepare-package , npm:@pnpm/installing.linking.hoist , npm:libnpmpack , npmcli-arborist , npmcli-metavuln-calculator , nuxt , nuxt-cli , nuxt-devtools , nuxt-devtools-kit , nuxt-devtools-ui-kit , nuxt-kit , nuxt-nitro-server , nuxt-rspack-builder , nuxt-schema , nuxt-vite-builder , nuxt-vite-server , nuxt-webpack-builder , nuxtjs-color-mode , nx , nx-angular , nx-angular-rspack , nx-angular-rspack-compiler , nx-cypress , nx-detox , nx-esbuild , nx-eslint , nx-eslint-plugin , nx-expo , nx-express , nx-jest , nx-js , nx-module-federation , nx-nest , nx-next , nx-node , nx-oxlint , nx-playwright , nx-plugin , nx-react , nx-react-native , nx-rollup , nx-rsbuild , nx-rspack , nx-storybook , nx-vite , nx-vitest , nx-vue , nx-web , nx-webpack , nx-workspace , oclif-plugin-autocomplete , oclif-plugin-not-found , oclif-plugin-plugins , oclif-plugin-search , oclif-plugin-skills-flag , oclif-plugin-version , oclif-plugin-warn-if-update-available , oclif-plugin-which , oclif/core , octane , octanejs-app-core , octanejs-astro , octanejs-docusaurus , octanejs-email , octanejs-email-cli , octanejs-livestore , octanejs-tanstack-start , octanejs-vite-plugin , op-sqlite , opencode , opencode-plugin , opencode-plugin-browser , opencode-sdk , opencode-simulation , opencode-util , optimize-css-assets-webpack-plugin , optimize-lodash-rollup-plugin , orval , orval-angular , orval-axios , orval-core , orval-effect , orval-fetch , orval-hono , orval-labs/orval , orval-mcp , orval-mock , orval-pinia-colada , orval-query , orval-solid-start , orval-swr , oxc-unshadowed-visitor , oxc-walker , oxfmt , oxlint , pacote , panda , pandacss-bun , pandacss-cli , pandacss-core , pandacss-dev , pandacss-extractor , pandacss-generator , pandacss-mcp , pandacss-node , pandacss-parser , pandacss-postcss , pandacss-reporter , pandacss-rollup , pandacss-token-dictionary , pandacss-transformer , pandacss-vite , pandacss-webpack , parcel , parcel-bundler-default , parcel-cache , parcel-compressor-raw , parcel-config-default , parcel-core , parcel-fs , parcel-namer-default , parcel-node-resolver-core , parcel-optimizer-css , parcel-optimizer-html , parcel-optimizer-image , parcel-optimizer-svg , parcel-optimizer-swc , parcel-optimizer-terser , parcel-package-manager , parcel-packager-css , parcel-packager-html , parcel-packager-js , parcel-packager-raw , parcel-packager-svg , parcel-packager-wasm , parcel-plugin , parcel-reporter-cli , parcel-reporter-dev-server , parcel-resolver-default , parcel-runtime-browser-hmr , parcel-runtime-js , parcel-runtime-rsc , parcel-runtime-service-worker , parcel-transformer-babel , parcel-transformer-css , parcel-transformer-html , parcel-transformer-image , parcel-transformer-js , parcel-transformer-json , parcel-transformer-node , parcel-transformer-postcss , parcel-transformer-posthtml , parcel-transformer-raw , parcel-transformer-react-refresh-wrap , parcel-transformer-svg , parcel-types , parcel-workers , patch-project , percy-cli , percy-cli-app , percy-cli-build , percy-cli-command , percy-cli-config , percy-cli-doctor , percy-cli-exec , percy-cli-snapshot , percy-cli-upload , percy-core , picomatch , pkg-utils , pkgs , playwright-experimental-ct-core , playwright-experimental-ct-react , playwright-test , playwright-test-scoped , plop , plugin-commands , plugin-help , plugin-update , plugin-warn-if-update-available , plugins , pm2 , pnpm , pnpm-bins.linker , pnpm-bins.resolver , pnpm-building.after-install , pnpm-cache.commands , pnpm-cli.commands , pnpm-cli.parse-cli-args , pnpm-deps.inspection.commands , pnpm-deps.status , pnpm-engine.pm.commands , pnpm-engine.runtime.commands , pnpm-exec.npm-lifecycle , pnpm-fetching.binary-fetcher , pnpm-fetching.git-fetcher , pnpm-fetching.tarball-fetcher , pnpm-installing.client , pnpm-installing.context , pnpm-installing.deps-installer , pnpm-installing.linking.modules-cleaner , pnpm-installing.linking.real-hoist , pnpm-installing.package-requester , pnpm-lockfile.make-dedicated-lockfile , pnpm-lockfile.settings-checker , pnpm-lockfile.verification , pnpm-releasing.commands , pnpm-releasing.exportable-manifest , pnpm-store.commands , pnpm-store.controller , pnpm-workspace.commands , pnpm-workspace.injected-deps-syncer , pnpm-workspace.package-patterns , pnpm-workspace.projects-filter , pnpm-workspace.projects-reader , pnpm-workspace.root-finder , polkadot-api , polkadot-api-cli , polkadot-api-docgen , porto , postcss-loader , posthog-react-native-plugin , powersync-js , powersync-nuxt , powersync-react-native , pre , preact-preset-vite , precinct , preferred-pm , prefresh , prettier-plugin-packagejson , puppeteer-core , qwik , racejar , raw-loader , readdirp , redocly-client-generator , redocly-openapi-core , redocly-recheck , redocly-respect-core , redocly-reunite-integration , release-it , release-notes-generator , remix , remix-run-assets , remix-run-cli , remix-run-render-middleware , remix-run-spa , remotion-eslint-config-flat , remotion-eslint-plugin , remotion-tailwind , remove , reown-appkit , reown-appkit-controllers , reown-appkit-pay , reown-appkit-scaffold-ui , reown-appkit-ui , reown-appkit-universal-connector , reown-appkit-utils , ripple , ripple-ts-adapter-vercel , ripple-ts-rollup-plugin , rock-js-tools , rollup-plugin-esbuild , rollup-plugin-replace , rollup-plugin-typescript , rollup-plugin-typescript2 , rollup-plugin-visualizer , rsbuild-core , rsbuild-image , rsbuild-plugin-css-minimizer , rsbuild-plugin-source-build , rslint-core , rspack-dev-server , rspress , rstack , rstest , run-script , runtime-cli , rushstack , rushstack-eslint-config , rushstack-eslint-plugin , rushstack-eslint-plugin-packlets , rushstack-eslint-plugin-security , rushstack-hashed-folder-copy-plugin , rushstack-heft-dev-cert-plugin , rushstack-heft-isolated-typescript-transpile-plugin , rushstack-heft-jest-plugin , rushstack-heft-lint-plugin , rushstack-heft-localization-typings-plugin , rushstack-heft-node-rig , rushstack-heft-rspack-plugin , rushstack-heft-sass-load-themed-styles-plugin , rushstack-heft-sass-plugin , rushstack-heft-serverless-stack-plugin , rushstack-heft-static-asset-typings-plugin , rushstack-heft-storybook-plugin , rushstack-heft-typescript-plugin , rushstack-heft-vscode-extension-plugin , rushstack-heft-vscode-extension-rig , rushstack-heft-web-rig , rushstack-heft-webpack4-plugin , rushstack-heft-webpack5-plugin , rushstack-localization-utilities , rushstack-lockfile-explorer , rushstack-package-extractor , rushstack-rush-cli-client , rushstack-typings-generator , rushstack-webpack4-localization-plugin , rushstack-webpack4-module-minifier-plugin , rushstack-webpack5-localization-plugin , sane , sanity , sanity-blueprints , sanity-cli , sanity-cli-build , sanity-cli-test , sanity-codegen , sanity-io/cli , sanity-migrate , sanity-pandacss-tsdown-plugin , sanity-plugin-mux-input , sanity-svelte-loader , sanity-template-validator , sanity-tsdown-config , sanity-vanilla-extract-tsdown-plugin , sanity-vision , sanity-workbench-cli , sass-embedded , sass-embedded-all-unknown , sass-embedded-unknown-all , sass-loader , sboudrias-package , scalar , scalar-agent-chat , scalar-api-client , scalar-api-reference , scalar-api-reference-react , scalar-astro , scalar-docusaurus , scalar-nextjs-openapi , scalar-nuxt , scalar-server-side-rendering , scalar-sidebar , scalar-starlight , scalar-sveltekit , scalar-use-toasts , scalar/scalar , schematics , schematics-angular , secretlint , secretlint-quick-start , secretlint-secretlint-rule-pattern , secretlint-walker , semantic-release , semantic-release-changelog , semantic-release-git , semantic-release-monorepo , semantic-release-npm , semantic-release-plugin-decorators , sentry-astro , sentry-cloudflare , sentry-eslint-config-sdk , sentry-gatsby , sentry-javascript , sentry-nextjs , sentry-nitro , sentry-nuxt , sentry-solidstart , sentry-sveltekit , shadcn , shadcn-registry , shikijs-vitepress-twoslash , shopify-react-native-skia , sigstore-cli , size-limit-esbuild-why , size-limit-rolldown-why , size-limit-webpack-css , smooth-code/jest-puppeteer , solana-mobile-mobile-wallet-adapter-protocol , solana-mobile-mobile-wallet-adapter-protocol-web3js , solidjs-start , sort-package-json , sort-package-json3 , storybook , storybook-addon-docs , storybook-angular , storybook-angular-vite , storybook-blocks , storybook-builder-manager , storybook-builder-vite , storybook-builder-webpack5 , storybook-cli , storybook-codemod , storybook-core , storybook-core-client , storybook-core-common , storybook-core-server , storybook-core-webpack , storybook-docs-tools , storybook-experimental-nextjs-vite , storybook-html , storybook-html-vite , storybook-html-webpack5 , storybook-nextjs , storybook-nextjs-vite , storybook-preact-vite , storybook-preact-webpack5 , storybook-preset-create-react-app , storybook-preset-html-webpack , storybook-preset-preact-webpack , storybook-preset-react-webpack , storybook-preset-svelte-webpack , storybook-preset-vue3-webpack , storybook-react-native-theming , storybook-react-native-web-vite , storybook-react-vite , storybook-react-webpack5 , storybook-svelte , storybook-svelte-vite , storybook-svelte-webpack5 , storybook-sveltekit , storybook-tanstack-react , storybook-telemetry , storybook-vue3 , storybook-vue3-vite , storybook-vue3-webpack5 , storybook-web-components-vite , strapi , strapi-admin , strapi-cloud-cli , strapi-content-manager , strapi-content-releases , strapi-content-type-builder , strapi-core , strapi-data-transfer , strapi-database , strapi-email , strapi-generators , strapi-i18n , strapi-permissions , strapi-plugin-cloud , strapi-plugin-color-picker , strapi-plugin-documentation , strapi-plugin-graphql , strapi-plugin-sentry , strapi-plugin-users-permissions , strapi-provider-email-mailgun , strapi-provider-email-sendgrid , strapi-provider-upload-cloudinary , strapi-provider-upload-local , strapi-review-workflows , strapi-strapi , strapi-types , strapi-upgrade , strapi-upload , strapi-utils , streamx , stryker-mutator-vitest-runner , style-loader , styled-components , styleguide , stylelint , stylelint-config-recess-order , stylelint-config-recommended , stylelint-config-recommended-scss , stylelint-order , stylelint-scss , stylelint-stylistic , stylex , stylistic-eslint-plugin-jsx , stylistic-eslint-plugin-ts , stylus-loader , sucrase , sveltejs-adapter-node , sveltejs-adapter-static , sveltejs-adapter-vercel , sveltejs-kit , svgr , svgr-rollup , sync-lockfile , tabler-icons , tabler-icons-astro , tailwindcss , tailwindcss-cli , tailwindcss-vite , tanstack-ai , tanstack-ai-code-mode , tanstack-ai-code-mode-snippets , tanstack-ai-isolate-cloudflare , tanstack-ai-isolate-e2b , tanstack-ai-isolate-node , tanstack-ai-isolate-quickjs , tanstack-ai-remix , tanstack-ai-sandbox-daytona , tanstack-devtools , tanstack-devtools-vite , tanstack-directive-functions-plugin , tanstack-eslint-plugin-query , tanstack-expo-db-sqlite-persistence , tanstack-react-native-db-sqlite-persistence , tanstack-react-start , tanstack-react-start-rsc , tanstack-router-cli , tanstack-router-generator , tanstack-router-plugin , tanstack-router-utils , tanstack-router-vite-plugin , tanstack-solid-start , tanstack-start-plugin-core , tanstack-vue-start , taquito , taquito-beacon-wallet , taquito-wallet-connect , tar-fs , tar-stream , teex , telemetry , temporalio-google-adk-agents , temporalio-nyc-test-coverage , tempy , testcafe-browser-tools , text-decoder , tinyglobby , tobilu-qmd , tronweb3-tronwallet-adapter-walletconnect , tronweb3-walletconnect-tron , trpc-next , ts-checker-rspack-plugin , ts-declaration-location , ts-jest , ts-loader , ts-morph , tsc-alias , tsdoc , tsdown , tsdown-css , tsdown-exe , tsdown-migrate , tsrx-eslint-plugin , tsrx-oxc , tsrx-vite-plugin-react , tufjs-cli , turbo-workspaces , twoslashes/twoslash , typeorm , typescript-eslint , typescript-eslint-eslint-plugin , typescript-eslint-parser , typescript-eslint-rule-schema-to-typescript-types , typescript-eslint-rule-tester , typescript-eslint-type-utils , typescript-eslint-typescript-estree , typescript-plugin-css-modules , typescript-sdk , unctx , unhead , unhead-bundler , unhead-vue , unimport , unloader , unocss , unocss-astro , unocss-cli , unocss-eslint-config , unocss-eslint-plugin , unocss-inspector , unocss-nuxt , unocss-postcss , unocss-transformer-attributify-jsx , unocss-vite , unocss-webpack , unocss/unocss , unplugin , unplugin-utils , unstorage , url-loader , use-wallet , verdaccio , verdaccio-api , verdaccio-cli , verdaccio-local-storage , verdaccio-local-storage-legacy , verdaccio-server , verdaccio-store , verdaccio-web , victory-native , vincentdchan/webpack-deep-scope-analysis-plugin , vinxi , vinxi-server-components , virmator-test , visual-editing , vite , vite-dev-rpc , vite-hot-client , vite-node , vite-plugin-basic-ssl , vite-plugin-checker , vite-plugin-commonjs , vite-plugin-css-injected-by-js , vite-plugin-dynamic-import , vite-plugin-inspect , vite-plugin-istanbul , vite-plugin-rnw , vite-plugin-satteri , vite-plugin-solid , vite-plugin-storybook-nextjs , vite-plugin-svelte , vite-plugin-top-level-await , vite-plugin-vue , vite-plugin-vue-inspector , vite-plugin-vue-tracer , vite-plus , vite-prerender-plugin , vite-tsconfig-paths , vitefu , vitejs-devtools , vitejs-devtools-kit , vitejs-plugin-react , vitejs-plugin-react-swc , vitest , vitest-browser , vitest-browser-playwright , vitest-browser-preview , vitest-coverage-istanbul , vitest-coverage-v8 , vitest-eslint-plugin , vitest-mocker , vitest-ui , vitest-web-worker , vitest-webdriverio , voidzero-dev-vite-plus-test , vscode-vsce , wagmi , wagmi-connectors , wallet-adapter , walletconnect-core , walletconnect-ethereum-provider , walletconnect-monorepo , walletconnect-sign-client , walletconnect-types , walletconnect-universal-provider , walletconnect-utils , walletconnect-utils-scoped , watcher , watchpack , wdio-allure-reporter , wdio-appium-service , wdio-browser-runner , wdio-browserstack-service , wdio-cli , wdio-config , wdio-crossbrowsertesting-service , wdio-cucumber-framework , wdio-devtools-service , wdio-electrobun-service , wdio-electron-service , wdio-globals , wdio-jasmine-framework , wdio-local-runner , wdio-mocha-framework , wdio-runner , wdio-tauri-service , wdio-utils , web-dev-server , web-dev-server-core , web-dev-server-rollup , web-test-runner , web-test-runner-chrome , web-test-runner-commands , web-test-runner-core , web-test-runner-coverage-v8 , web-test-runner-mocha , web-test-runner-visual-regression , webdriver , webdriverio , webpack , webpack-dev-middleware , webpack-dev-server , webpack-filter-warnings-plugin , webpack-manifest-plugin , webpackbar , which-package-manager , wireit , wix-pilot-core , wordpress-block-editor , wordpress-build , wordpress-components , wordpress-create-block , wordpress-eslint-plugin , wordpress-jest-console , wordpress-jest-preset-default , wordpress-npm-package-json-lint-config , wordpress-scripts , wordpress-stylelint-config , workbox , worker-loader , workers-sdk , workflow , workflow-astro , workflow-builders , workflow-cli , workflow-nest , workflow-next , workflow-nitro , workflow-nuxt , workflow-rollup , workflow-sveltekit , workflow-vite , workflow-vitest , workflow-world-testing , workflows , workspaces-config , ws-git-lazy , ws-glob , ws-pkg-list , ws-root-changelog , ws-yarn-workspaces , wyw-in-js , wyw-in-js-bun , wyw-in-js-parcel-transformer , wyw-in-js-rollup , wyw-in-js-vite , x402-paywall , xdl , yarn-berry-deduplicate , yarn-list-link , yarn-tool-changelog , yarn-tool-check-pkg-bin , yarn-tool-dotenv , yarn-tool-find-deps , yarn-tool-find-tsconfig , yarn-tool-fix-all , yarn-tool-fix-ws-links , yarn-tool-fix-ws-pkgs-link , yarn-tool-fix-ws-versions , yarn-tool-ignore , yarn-tool-init-path , yarn-tool-is-published , yarn-tool-ncu , yarn-tool-ncu-ws , yarn-tool-node-modules , yarn-tool-node-modules-link , yarn-tool-npa-to-deps-query , yarn-tool-pack-package , yarn-tool-path-parents , yarn-tool-pkg-deps-add , yarn-tool-pkg-deps-util , yarn-tool-pkg-entry-util , yarn-tool-pkg-git-info , yarn-tool-pkg-hosted-info , yarn-tool-pkg-version-query , yarn-tool-publish-retry , yarn-tool-run-script-lifecycle , yarn-tool-search-workspace-prefix-by-name , yarn-tool-setup-module-env , yarn-tool-tag , yarn-tool-version-recommended , yarn-tool-workspaces-project , yarn-tool-ws-changed , yarn-tool-ws-find-up-paths , yarn-tool-ws-scope , yarn-tool-yarn-struct-utils , yarn-tool-yarnlock , yarn-tool-yarnlock-dedupe , yarn-tool-yarnlock-diff , yarn-tool-yarnlock-entries , yarn-tool-yarnlock-ncu , yarn-tool-yarnlock-util , yarnpkg-core , yarnpkg-extensions , yarnpkg-nm , yarnpkg-shell , yeoman-api , yeoman-generator , yeoman/environment

Affected packages:

picomatch @ 4.0.2 (+7628 more)