CVE-2018-1109
nodejs-braces: Regular Expression Denial of Service (ReDoS) in lib/parsers.js
A vulnerability was found in Braces versions 2.2.0 and above, prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.
CVSS 3.1 · 5.3 Medium
EPSS 1.4%
KEV · Not listed
Vendors
Products