Login Request a demo
MI
Product
minimatch
by isaacs · last CVE Feb 26, 2026
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 3Medium 0Low 0
Severity
All severities3Critical0High3Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add minimatch to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-27904
7.5
1%
Feb 26
minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions
Affected: >= 10.0.0, < 10.2.3; >= 9.0.0, < 9.0.7; >= 8.0.0, < 8.0.6; >= 7.0.0, < 7.4.8; >= 6.0.0, < 6.2.2; >= 5.0.0, < 5.1.8; +2 more
CVE-2026-27903
7.5
1%
Feb 26
minimatch has a ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments
Affected: >= 10.0.0, < 10.2.3; >= 9.0.0, < 9.0.7; >= 8.0.0, < 8.0.6; >= 7.0.0, < 7.4.8; >= 6.0.0, < 6.2.2; >= 5.0.0, < 5.1.8; +2 more
CVE-2026-26996
7.5
1%
Feb 20
minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern
Affected: < 10.2.1
Showing 3