pkg:npm/minimatch

All known vulnerabilities

• HIGH7.5CVE-2026-27903minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments
  >= 10.0.0, < 10.2.3
• HIGH7.5CVE-2026-27904minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions
  >= 10.0.0, < 10.2.3
• HIGH7.5CVE-2026-26996minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern
  >= 10.0.0, < 10.2.1
• HIGH7.5node-minimatch - security update
  from 0, < 3.0.5
• HIGH7.5Regular Expression Denial of Service in minimatch
  from 0, < 3.0.2