This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2016-10540 | BDVDB-2026-101342 Detail

HackerOneminimatch node module

Description#

Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript `RegExp` objects. The primary function, `minimatch(path, pattern)` in Minimatch 3.0.1 and earlier is vulnerable to ReDoS in the `pattern` parameter.

Impact#

No impact statement in the source data.

Weaknesses#

  • CWE-400 Uncontrolled Resource Consumption

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.