CVE-2022-3517

7.5

HIGHCVSS v3

Published

October 17, 2022

Affected

10 projects

Assigned by

Red Hat

Severity scale

010

Description

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service.

minimatch

NPMa glob matcher in javascript

< 3.0.5NVD

isaacs/minimatch

GitHuba glob matcher in javascript

< 3.0.5NVD

@types/minimatch

NPM

More on this CVE

NVD↗GitHub Advisory↗

Stub TypeScript definitions entry for minimatch, which provides its own types definitions

< 3.0.5NVD

grafana/grafana-image-renderer

GitHubA Grafana backend service that handles rendering of panels & dashboards to PNGs using headless browser (Chromium/Chrome)

NVD

fedora

Crates.ioBase library for interacting with Fedora web services

= 36, = 37NVD

fedora

Python Package IndexPlaceholder for the fedora name

= 36, = 37NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 36, = 37NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 36, = 37NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 36, = 37NVD

Minimatch

NuGet GalleryA C# glob matcher

< 3.0.5NVD

Security Advisories

CVE-2022-3517

Description

More on this CVE