Security: isaacs/minimatch
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
ReDoS: nested *() extglobs generate catastrophically backtracking regular expressionsGHSA-23c5-xmqv-rm74 published
Feb 25, 2026 by isaacsHigh -
ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segmentsGHSA-7r86-cg39-jmmj published
Feb 25, 2026 by isaacsHigh -
ReDoS via repeated wildcards with non-matching literal in patternGHSA-3ppc-4f35-3m26 published
Feb 17, 2026 by isaacsHigh