micromatch vulnerabilities
Every vulnerability this feed holds for micromatch, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
2 vulnerabilities tracked. 1 with public exploit code.
- 8.7 braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards.
- 7.5 The NPM package braces, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that micromatch is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Linux Red Hat Google Microsoft Apple IBM Apache Software Foundation zephyrproject Oracle Corporation n/a Unknown JetBrains Drupal Tanium Hewlett Packard Enterprise (HPE) Eclipse Foundation Samsung Semiconductor SuiteCRM HCL Software wazuh Gnome vercel kyverno X.org