Description
A vulnerability was found in Braces versions prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.
Remediation
References
https://bugzilla.redhat.com/show_bug.cgi?id=1547272
https://snyk.io/vuln/npm:braces:20180219
Related Vulnerabilities
CVE-2023-48796 Vulnerability in maven package org.apache.dolphinscheduler:dolphinscheduler-master
CVE-2023-47324 Vulnerability in maven package org.silverpeas.core:silverpeas-core-api
CVE-2021-21252 Vulnerability in maven package org.webjars.npm:jquery-validation
CVE-2022-31170 Vulnerability in npm package @openzeppelin/contracts-upgradeable
CVE-2023-40344 Vulnerability in maven package org.jenkins-ci.plugins:delphix