Skip to content

[GHSA-v6h2-p8h4-qcjw] brace-expansion Regular Expression Denial of Service vulnerability #5713

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Conversation

bobvandevijver
Copy link

Updates

  • Affected products
  • CVSS v3
  • CVSS v4
  • Description
  • References

Comments
Releases with the same fix have been created for all major versions: https://github.com/juliangruber/brace-expansion/releases.

@github-actions github-actions bot changed the base branch from main to bobvandevijver/advisory-improvement-5713 June 11, 2025 19:13
@turi4200
Copy link

Looks good to me

@turi4200
Copy link

duplicate of #5716
already merged

@taladrane
Copy link
Collaborator

Thank you for your contribution to the Advisory Database @bobvandevijver! As @turi4200 mentioned above, this is actually a duplicate of a few other PRs that have already contributed this information to us (#5701, #5710, #5716). We've made the relevant changes to GHSA-v6h2-p8h4-qcjw, and you should be able to see the updates live.

This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!

@taladrane taladrane closed this Jun 11, 2025
@github-actions github-actions bot deleted the bobvandevijver-GHSA-v6h2-p8h4-qcjw branch June 11, 2025 21:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants