Skip to content

Known vulnerabilities in isaacs brace-expansion

Is your version affected?

CVE Summary Score Published
CVE-2026-25547 @isaacs/brace-expansion is a hybrid CJS/ESM TypeScript fork of brace-expansion 9.2 Critical Feb 4, 2026

Other isaacs products