Known vulnerabilities in nodejs-brace-expansion

Vendor: openEuler
Software: nodejs-brace-expansion
Software CPE: cpe:2.3:o:openeuler:nodejs-brace-expansion:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nodejs-brace-expansion nodejs-brace-expansion is affected by 2 known vulnerabilities: 1 medium, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128397 - Improper input validation
CVE-2026-33750		 CWE-20 Medium
No
No
 1.1.11-3 28.04.2026 SB20260428215
SB20260428223
SB2026042934
and 10 more
#VU112890 - Inefficient Regular Expression Complexity
CVE-2025-5889		 CWE-1333 Low
No
No
 1.1.11-2 15.07.2025 SB2025071511
SB2025071512
SB2025071513
and 36 more