VYPR

minimatch

by Isaacs

Source repositories

CVEs (1)

  • CVE-2026-118764MedOct 29, 2026
    risk 0.38cvss —epss 0.00

    minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Starting in 7.0.0 and prior to 11.0.1, src/index.ts implements firstPhasePreProcess() so that, at optimizationLevel 2 or higher, it repeatedly expands attacker-controlled…