Known vulnerabilities in minimatch
Vendor:
isaacs
Software:
minimatch
Software CPE:
cpe:2.3:a:isaacs:minimatch:*:*:*:*:*:*:*:*
Website:
https://www.npmjs.com/~isaacs
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
10.2.6
10.2.5
9.0.9
10.2.4
9.0.8
8.0.7
7.4.9
6.2.3
10.2.3
9.0.7
8.0.6
7.4.8
6.2.2
5.1.8
4.2.5
3.1.4
9.0.6
8.0.5
7.4.7
6.2.1
5.1.7
4.2.4
3.1.3
2.0.11
1.0.1
10.2.2
10.2.1
10.2.0
10.1.3
10.1.2
10.1.1
10.1.0
10.0.3
10.0.2
10.0.1
10.0.0
9.0.5
9.0.4
9.0.3
9.0.2
9.0.1
9.0.0
8.0.4
7.4.6
8.0.3
7.4.5
8.0.2
8.0.1
8.0.0
7.4.4
7.4.3
7.4.2
7.4.1
7.4.0
7.3.0
7.2.0
7.1.4
7.1.3
7.1.2
7.1.1
7.1.0
7.0.1
7.0.0
6.2.0
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
5.1.6
4.2.3
6.1.4
6.1.3
6.1.2
6.1.1
5.1.5
4.2.2
6.1.0
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
5.1.4
5.1.3
5.1.2
5.1.1
5.1.0
5.0.1
5.0.0
4.2.1
4.2.0
4.1.1
4.1.0
4.0.0
3.1.2
3.1.1
3.1.0
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
2.0.10
2.0.9
2.0.8
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.0.0
0.4.0
0.3.0
0.2.14
0.2.13
0.2.12
0.2.11
0.2.10
0.2.9
0.2.8
0.2.7
0.2.6
0.2.5
0.2.4
0.2.3
0.2.2
0.2.1
0.2.0
0.1.6
0.1.5
0.1.4
0.1.3
0.1.2
0.1.1
0.1.0
0.0.5
0.0.4
0.0.1
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU134878 - Inefficient Algorithmic Complexity CVE-2026-27903 |
CWE-407 | Medium | 3.1.3, 4.2.5, 5.1.8, 6.2.2, 7.4.8, 8.0.6, 9.0.7, 10.2.3 | 18.06.2026 |
SB2026022345 SB2026061994 SB2026061999 and 1 more |
||
| #VU126873 - Inefficient Regular Expression Complexity CVE-2026-27904 |
CWE-1333 | Low | 3.1.4, 4.2.5, 5.1.8, 6.2.2, 7.4.8, 8.0.6, 9.0.7, 10.2.3 | 22.04.2026 |
SB20260422244 SB20260423104 SB20260423105 and 13 more |
||
| #VU123140 - Inefficient Regular Expression Complexity CVE-2026-26996 |
CWE-1333 | Medium | 3.1.3, 4.2.4, 5.1.7, 6.2.1, 7.4.7, 8.0.5, 9.0.6, 10.2.1 | 23.02.2026 |
SB2026022345 SB2026030633 SB2026032328 and 31 more |
||
| #VU118143 - Incorrect Regular Expression CVE-2016-10540 |
CWE-185 | High | 3.0.2 | 06.11.2025 |
SB2018053124 SB2025110755 SB2026010817 and 1 more |
||
| #VU69942 - Incorrect Regular Expression CVE-2022-3517 |
CWE-185 | Medium | 3.0.5 | 06.12.2022 |
SB2022120638 SB2022120639 SB2022120640 and 48 more |