Juliangruber Brace-expansion — known CVE vulnerabilities

Every CVE whose affected-product data names Juliangruber Brace-expansion, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2026-33750 — CVSS 6.5 (medium): The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to versions 5.0.5, 3.0.2, 2.0.3, and…
• CVE-2026-45149 — CVSS 6.5 (medium): The brace-expansion library generates arbitrary strings containing a common prefix and suffix. From 5.0.0 to before 5.0.6, the max option…