Tag

minimatch

Safeguard articles tagged "minimatch" — guides, analysis, and best practices for software supply chain and application security.

1 article

CVE-2022-3517: ReDoS in minimatch pattern matching

CVE-2022-3517 is a high-severity ReDoS flaw in minimatch's glob-to-regex conversion, impacting a huge share of the npm ecosystem's dependency graph.