CVE-2017-18077
nodejs-brace-expansion: Regular expression denial of service
index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an expand argument containing many comma characters.
CVSS 3.0 · 7.5 High
EPSS 2.6%
KEV · Not listed
Vendors
Products