Tag

minimatch-redos

Safeguard articles tagged "minimatch-redos" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

minimatch regular expression denial of service (CVE-2022-3517)

A ReDoS flaw in minimatch (CVE-2022-3517) lets a single crafted string hang Node.js processes. Here's what's affected, the risk context, and how to fix it.

Jan 3, 20267 min read