Description
A vulnerability was found in Braces versions 2.2.0 and above, prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.
Remediation
References
https://bugzilla.redhat.com/show_bug.cgi?id=1547272
https://snyk.io/vuln/npm:braces:20180219
Related Vulnerabilities
CVE-2022-45391 Vulnerability in maven package io.jenkins.plugins:cavisson-ns-nd-integration
CVE-2022-23631 Vulnerability in npm package superjson
CVE-2020-28472 Vulnerability in npm package @aws-sdk/shared-ini-file-loader
CVE-2022-23496 Vulnerability in maven package nl.basjes.parse.useragent:yauaa-elasticsearch-8
CVE-2023-37947 Vulnerability in maven package org.openshift.jenkins:openshift-login