micromatch picomatch

2 known vulnerabilities in micromatch picomatch, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-33672 CVSS 5.3 medium Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection…
  • CVE-2026-33671 CVSS 7.5 high Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to Regular Expression Denial of…