Description
A vulnerability was found in Braces versions prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.
Remediation
References
https://bugzilla.redhat.com/show_bug.cgi?id=1547272
https://snyk.io/vuln/npm:braces:20180219
Related Vulnerabilities
CVE-2022-25873 Vulnerability in maven package org.webjars.npm:vuetify
CVE-2020-36188 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind
CVE-2020-27216 Vulnerability in maven package org.eclipse.jetty:jetty-webapp
CVE-2022-28220 Vulnerability in maven package org.apache.james.protocols:protocols-api
CVE-2021-21320 Vulnerability in npm package matrix-react-sdk