juliangruber/brace-expansion Security Advisories | GitStock

medium2026-09-29

brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service

GHSA-q2hr-2g5m-vwhr · CVE-2026-102277

high2026-09-29

brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion

GHSA-qhr7-859c-m2p7 · CVE-2026-102278

high2026-09-29

brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion

GHSA-6j4f-fj2g-mc7p · CVE-2026-102276

high2026-08-03

brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

GHSA-rgw5-rvv9-x895 · CVE-2026-69152

high2026-07-24

brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash

GHSA-mh99-v99m-4gvg · CVE-2026-14257

high2026-07-20

brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups

GHSA-3jxr-9vmj-r5cp · CVE-2026-13149

medium2026-05-18

brace-expansion: Large numeric range defeats documented `max` DoS protection

GHSA-jxxr-4gwj-5jf2 · CVE-2026-45149

medium2026-03-26

brace-expansion: Zero-step sequence causes process hang and memory exhaustion

GHSA-f886-m6hf-6m8v · CVE-2026-33750

low2025-06-09

brace-expansion Regular Expression Denial of Service vulnerability

GHSA-v6h2-p8h4-qcjw · CVE-2025-5889