BR
Product
brace-expansion
by juliangruber · last CVE Sep 28, 2026
9
CVEs
0
On KEV
7.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 1Low 1
Watch

Add brace-expansion to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102277
5.3
0%
Sep 28
brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service
Affected: >= 4.0.0, < 5.0.12; >= 3.0.0, < 3.0.9; >= 2.0.0, < 2.1.7; < 1.1.21
Showing 1