CVE-2018-1109

A vulnerability was found in Braces versions 2.2.0 and above, prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.

Score

CVSS 3.1 5.3 Medium

Status

Modified - secalert@redhat.com

Published

2021-03-30

Last modified

2025-12-01

Weaknesses

CWE-185, CWE-400

Affected products

• Braces (Braces Project)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1547272
• https://snyk.io/vuln/npm:braces:20180219