[ Vendor · 3 CVEs ]
juliangruber
CVEs affecting juliangruber published in the last 30 days, plus any juliangruber CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102276 | 28 Sep 2026 | CVSS 7.5 | brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustionThe brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted… | Fix |
| CVE-2026-102277 | 28 Sep 2026 | CVSS 5.3 | brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of serviceThe brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3.0.9, and 5.0.12, the expand… | Fix |
| CVE-2026-102278 | 28 Sep 2026 | CVSS 7.5 | brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustionThe brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply… | Fix |