Not rated
CVE-2018-1109 A vulnerability was found in Braces versions 2.2.0 and above, prior to 2.3.1
Description
A vulnerability was found in Braces versions 2.2.0 and above, prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| nodejs-braces 2.2 | 2.2.0 → < 2.3.1 | 2.3.1 |