Description

A vulnerability was found in Braces versions prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.

Remediation

References

https://bugzilla.redhat.com/show_bug.cgi?id=1547272

https://snyk.io/vuln/npm:braces:20180219

Related Vulnerabilities

CVE-2018-16487 Vulnerability in npm package lodash

CVE-2021-23370 Vulnerability in npm package swiper

CVE-2020-14446 Vulnerability in maven package org.wso2.carbon.identity.framework:org.wso2.carbon.identity.entitlement.ui

CVE-2023-25345 Vulnerability in npm package swig-templates

CVE-2020-26237 Vulnerability in maven package org.webjars.npm:highlight.js

Severity

Medium

Classification

CWE-400 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Tags

Issue Tracking Patch Third Party Advisory Exploit