Security Advisory

CVE-2016-10540

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-05-31 20:00:00
Last updated 2024-09-16 19:24:48
Assigner hackerone
CVSS score not scored
State PUBLISHED

Description

Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript `RegExp` objects. The primary function, `minimatch(path, pattern)` in Minimatch 3.0.1 and earlier is vulnerable to ReDoS in the `pattern` parameter.