braces vulnerabilities

CVEs whose affected-version data names the braces package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-93687High· 7.5PoC

4d ago

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Nod…

▾ Midnightmicromatch · bracesEPSS 0.41%via NVD