This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2016-10540 →
DEBIAN-CVE-2016-10540
Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript `RegExp` objects. The primary function, `minimatch(p...
Original description
The description as published by the source.
Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript RegExp objects. The primary function, minimatch(path, pattern) in Minimatch 3.0.1 and earlier is vulnerable to ReDoS in the pattern parameter.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
node-minimatch
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-1"}]}]
Debian:13
node-minimatch
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-1"}]}]
Debian:14
node-minimatch
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-1"}]}]
References
- advisory security-tracker.debian.org