The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packaging-bundlerUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-libsUpgrade nodejs-packagingUpgrade nodejsUpgrade nodejs-docsUpgrade nodejs-nodemonUpgrade nodejs-devel | Dec 9, 2022 | Oct 17, 2022 |
| Atlassian Jira | — | Upgrade to the latest version of Atlassian JIRA | Dec 12, 2025 | Dec 11, 2025 |
| Centos_linux | — | Upgrade nodejs-full-i18nUpgrade nodejsUpgrade nodejs-debuginfoUpgrade npmUpgrade nodejs-packaging-bundlerUpgrade nodejs-libs-debuginfoUpgrade nodejs-libsUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-debugsourceUpgrade nodejs-devel | Dec 7, 2022 | Oct 17, 2022 |
| Debian | — | Upgrade node-minimatch | Jan 17, 2023 | Oct 17, 2022 |
| Oracle_linux | — | Upgrade nodejs-packaging-bundlerUpgrade nodejs-develUpgrade nodejs-docsUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejsUpgrade nodejs-nodemonUpgrade nodejs-libs | Dec 8, 2022 | Feb 6, 2022 |
| Redhat_linux | — | Upgrade nodejs-develUpgrade nodejs-packaging-bundlerUpgrade nodejs-packagingUpgrade nodejs-libs-debuginfoNo solution existsUpgrade nodejsUpgrade nodejs-libsUpgrade nodejs-docsUpgrade npmUpgrade nodejs-debuginfoUpgrade nodejs-nodemonUpgrade nodejs-debugsourceUpgrade nodejs-full-i18n | Dec 7, 2022 | Oct 17, 2022 |
| Rocky_linux | — | Upgrade nodejs-libs-debuginfoUpgrade nodejs-libsUpgrade nodejsUpgrade nodejs-debugsourceUpgrade nodejs-develUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-debuginfo | Mar 12, 2024 | Oct 17, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Oct 17, 2022 |
| Ubuntu | — | Upgrade node-minimatch | May 19, 2023 | Oct 17, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub