Skip to content

Fix minimatch security audit#648

Open
melroy89 wants to merge 1 commit into
isaacs:mainfrom
melroy89:fix_security_audit
Open

Fix minimatch security audit#648
melroy89 wants to merge 1 commit into
isaacs:mainfrom
melroy89:fix_security_audit

Conversation

@melroy89

@melroy89 melroy89 commented Feb 27, 2026

Copy link
Copy Markdown 
minimatch  10.0.0 - 10.2.2
Severity: high
minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments - https://github.com/advisories/GHSA-7r86-cg39-jmmj
minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions - https://github.com/advisories/GHSA-23c5-xmqv-rm74

@luc-LMZ

luc-LMZ commented Apr 9, 2026

Copy link
Copy Markdown

It will be really good to have this merged

@melroy89

melroy89 commented Apr 10, 2026

Copy link
Copy Markdown
Author

It will be really good to have this merged

I agree of course..

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
@scutuatua-crypto scutuatua-crypto scutuatua-crypto approved these changes
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@melroy89 @luc-LMZ @scutuatua-crypto