micromatch braces

2 known vulnerabilities in micromatch braces, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-93687 CVSS 8.7 high braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply…
  • CVE-2024-4068 CVSS 7.5 high The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory…