Vulnerability CVE-2022-3517
Published: 2022-10-17

Description:
A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service.

Type:

CWE-400

 (Uncontrolled Resource Consumption ('Resource Exhaustion'))

 References:
https://github.com/grafana/grafana-image-renderer/issues/329
https://github.com/isaacs/minimatch/commit/a8763f4388e51956be62dc6025cec1126beeb5e6
Copyright 2024, cxsecurity.com

 

Back to Top