Known vulnerabilities in picomatch
Vendor:
micromatch
Software:
picomatch
Software CPE:
cpe:2.3:a:micromatch:picomatch:*:*:*:*:*:*:*:*
Website:
https://github.com/micromatch
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU143925 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2026-33672 |
CWE-1321 | Medium | 2.3.2, 3.0.2, 4.0.4 | 18.08.2026 |
SB2026081815 SB2026081816 SB2026081831 and 4 more |
||
| #VU139384 - Inefficient Regular Expression Complexity CVE-2026-33671 |
CWE-1333 | Medium | 2.3.2, 3.0.2, 4.0.4 | 26.07.2026 |
SB2026072609 SB2026072616 SB2026081816 and 5 more |