Skip to content
Threat Feed

Tag

Picomatch

1 brief RSS
high advisory

Picomatch ReDoS Vulnerability via Extglob Quantifiers

Picomatch is vulnerable to Regular Expression Denial of Service (ReDoS) when processing crafted extglob patterns with quantifiers, leading to excessive CPU consumption and denial of service.

picomatch ReDoS denial-of-service extglob
2r 1t