Open
Description
Description: minimatch package versions before 3.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS). It's possible to cause a denial of service when calling function braceExpand (The regex /{.*}/ is vulnerable and can be exploited).
Solution: Update minimatch version 3.0.4 to 3.0.5.
Vulnerability Link : isaacs/minimatch@a8763f4
Reference: grafana/grafana-image-renderer#329
Metadata
Metadata
Assignees
Labels
No labels