| Package | Affected versions | Patched versions |
|---|---|---|
| brace expansion | < 1.1.7 | 1.1.7 |
| brace-expansion | < 1.1.7 | 1.1.7 |
Affected versions of brace-expansion are vulnerable to a regular expression denial of service condition.
var expand = require('brace-expansion');
expand('{,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,\n}');
Update to version 1.1.7 or later.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free