Description
A vulnerability was found in Braces versions prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.
Remediation
References
https://bugzilla.redhat.com/show_bug.cgi?id=1547272
https://snyk.io/vuln/npm:braces:20180219
Related Vulnerabilities
CVE-2018-20676 Vulnerability in maven package org.webjars.bower:bootstrap
CVE-2022-41828 Vulnerability in maven package com.amazon.redshift:redshift-jdbc42
CVE-2020-36732 Vulnerability in maven package org.webjars.bower:crypto-js
CVE-2023-26486 Vulnerability in npm package vega
CVE-2022-37734 Vulnerability in maven package com.graphql-java:graphql-java