Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

micromatch vulnerability #12482

Open
mark2093 opened this issue May 16, 2024 · 1 comment
Open

micromatch vulnerability #12482

mark2093 opened this issue May 16, 2024 · 1 comment

Comments

@mark2093
Copy link

Issue description

There is a vulnerability detected (serverless@3.38.0) by Snyk regarding micromatch

Context

serverless@3.38.0 > @serverless/dashboard-plugin@7.2.3 > @serverless/platform-client@4.5.1 > fast-glob@3.3.2 > micromatch@4.0.5

Affected versions of this package are vulnerable to Inefficient Regular Expression Complexity due to the use of unsafe pattern configurations that allow greedy matching through the micromatch.braces() function. An attacker can cause the application to hang or slow down by passing a malicious payload that triggers extensive backtracking in regular expression processing.

@Malashan05
Copy link

+1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants