Known vulnerabilities in brace-expansion
Vendor:
Julian Gruber
Software:
brace-expansion
Software CPE:
cpe:2.3:a:juliangruber:brace-expansion:*:*:*:*:*:*:*:*
Website:
https://github.com/juliangruber
Total vulnerabilities:
10
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
1.1.19
1.1.20
1.1.21
2.1.5
2.1.6
2.1.7
3.0.7
3.0.8
3.0.9
5.0.10
5.0.11
5.0.12
1.1.18
5.0.9
3.0.6
2.1.4
1.1.17
3.0.5
2.1.3
3.0.4
3.0.3
5.0.8
2.1.2
1.1.16
5.0.7
1.1.15
2.1.1
5.0.6
2.1.0
1.1.14
5.0.1
3.0.2
2.0.3
1.1.13
5.0.5
5.0.4
5.0.3
5.0.2
4.0.1
4.0.0
3.0.1
3.0.0
2.0.2
2.0.1
2.0.0
1.1.12
1.1.11
1.1.10
1.1.9
1.1.8
1.1.7
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.1
1.0.0
Vulnerabilities (10)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU164365 - Uncontrolled Recursion CVE-2026-102276 |
CWE-674 | Medium | 1.1.19, 2.1.5, 3.0.7, 5.0.10 | 10.11.2026 |
SB20261110239 SB20261110240 SB20261110297 and 1 more |
||
| #VU164364 - Uncontrolled Recursion CVE-2026-102278 |
CWE-674 | Medium | 1.1.20, 2.1.6, 3.0.8, 5.0.11 | 10.11.2026 |
SB20261110239 SB20261110240 SB20261110296 and 1 more |
||
| #VU164363 - Inefficient Algorithmic Complexity CVE-2026-102277 |
CWE-407 | Medium | 1.1.21, 2.1.7, 3.0.9, 5.0.12 | 10.11.2026 |
SB20261110261 SB20261111140 |
||
| #VU140707 - Resource exhaustion CVE-2026-69152 |
CWE-400 | Medium | 2.0.0, 2.1.4, 3.0.6, 5.0.9 | 01.08.2026 |
SB2026080125 SB2026081044 SB2026083142 and 12 more |
||
| #VU140706 - Allocation of Resources Without Limits or Throttling CVE-2026-14257 |
CWE-770 | Medium | 1.1.17, 2.1.3, 3.0.3, 5.0.8 | 01.08.2026 |
SB2026080124 SB2026083142 SB2026083146 and 14 more |
||
| #VU135820 - Inefficient Algorithmic Complexity CVE-2026-13149 |
CWE-407 | Medium | 5.0.7 | 29.06.2026 |
SB20260629111 SB2026072843 SB2026072877 and 23 more |
||
| #VU131107 - Resource exhaustion CVE-2026-45149 |
CWE-400 | Medium | 5.0.6 | 12.05.2026 |
SB2026051222 SB2026061993 SB2026061994 and 3 more |
||
| #VU128397 - Improper input validation CVE-2026-33750 |
CWE-20 | Medium | 1.1.13, 2.0.3, 3.0.2, 5.0.5 | 28.04.2026 |
SB20260428215 SB20260428223 SB2026042934 and 10 more |
||
| #VU124876 - Inefficient Regular Expression Complexity CVE-2026-25547 |
CWE-1333 | Low | 5.0.1 | 06.04.2026 |
SB2026040628 SB2026040631 SB2026040632 and 13 more |
||
| #VU112890 - Inefficient Regular Expression Complexity CVE-2025-5889 |
CWE-1333 | Low | 1.1.12, 2.0.2, 3.0.1, 4.0.1 | 15.07.2025 |
SB2025071511 SB2025071512 SB2025071513 and 36 more |