Skip to content

Fix minimatch vulnerability#1643

Open
marcomura wants to merge 2 commits intomainfrom
mmura/fix-minimatch-vuln-2
Open

Fix minimatch vulnerability#1643
marcomura wants to merge 2 commits intomainfrom
mmura/fix-minimatch-vuln-2

Conversation

@marcomura
Copy link
Copy Markdown
Collaborator

@marcomura marcomura commented Feb 21, 2026

minimatch <10.2.1
Severity: high
minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern - GHSA-3ppc-4f35-3m26


Rovo Dev code review: Rovo Dev has reviewed this pull request
Any suggestions or improvements have been posted as pull request comments.

sdzh-atlassian
sdzh-atlassian previously approved these changes Feb 21, 2026
@marcomura marcomura enabled auto-merge (squash) February 21, 2026 00:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants