Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

high vulnerability issue in dependent package minimatch #252

Open
ahernandez111 opened this issue Mar 15, 2023 · 0 comments
Open

high vulnerability issue in dependent package minimatch #252

ahernandez111 opened this issue Mar 15, 2023 · 0 comments

Comments

@ahernandez111
Copy link

Description: minimatch package versions before 3.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS). It's possible to cause a denial of service when calling function braceExpand (The regex /{.*}/ is vulnerable and can be exploited).

Solution: Update minimatch version 3.0.4 to 3.0.5.

Vulnerability Link : isaacs/minimatch@a8763f4

Reference: grafana/grafana-image-renderer#329

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant