Brace Expansion Project Brace Expansion — known CVE vulnerabilities

Every CVE whose affected-product data names Brace Expansion Project Brace Expansion, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2017-18077 — CVSS 7.5 (high): index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an…