Every CVE Search/ Get API key

CVE-2024-4068

Memory Exhaustion in braces

7.5 HighFix available

The NPM package braces, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In lib/parse.js, if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.47%Up 1.4 points since May 14, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.5

Memory Exhaustion in braces

The NPM package braces, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In lib/parse.js, if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

Record
CVE-2024-4068
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-1050, CWE-400
Updated
2026-11-02
EUVDEUVD-2024-1632 7.5

The NPM package braces, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In lib/parse.js, if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

Record
EUVD-2024-1632
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-grv7-fg5c-xmjg 7.5

Uncontrolled resource consumption in braces

The NPM package braces fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In lib/parse.js, if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

Record
GHSA-grv7-fg5c-xmjg
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400, CWE-1050
Updated
2026-11-02
NVD 7.5

The NPM package braces, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In lib/parse.js, if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

Record
CVE-2024-4068
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-1050, CWE-400
Updated
2026-11-02
OSV 7.5

Memory Exhaustion in braces

The NPM package braces, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In lib/parse.js, if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

Record
CVE-2024-4068
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-1050
Updated
2026-11-02
OSVDEBIAN-CVE-2024-4068 7.5

The NPM package braces, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In lib/parse.js, if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

Record
DEBIAN-CVE-2024-4068
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 20 moreShow less
OSVGHSA-grv7-fg5c-xmjg 7.5

Uncontrolled resource consumption in braces

The NPM package braces fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In lib/parse.js, if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

Record
GHSA-grv7-fg5c-xmjg
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-1050, CWE-400
Updated
2026-11-02
OSVRHSA-2024:8075 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.19 Security update

Record
RHSA-2024:8075
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:8076 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.19 Security update

Record
RHSA-2024:8076
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:8077 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.19 Security update

Record
RHSA-2024:8077
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-4068 7.5

The NPM package braces, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In lib/parse.js, if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

Record
UBUNTU-CVE-2024-4068
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-42034 No score

CVE-2024-4068 affecting package reaper for versions less than 3.1.1-9

The NPM package braces, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In lib/parse.js, if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

Record
AZL-42034
Updated
2026-11-02
OSVAZL-44020 No score

CVE-2024-4068 affecting package nodejs-nodemon 2.0.3-4

The NPM package braces, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In lib/parse.js, if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

Record
AZL-44020
Updated
2026-11-02
OSVAZL-44562 No score

CVE-2024-4068 affecting package nodejs-nodemon 2.0.3-5

The NPM package braces, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In lib/parse.js, if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

Record
AZL-44562
Updated
2026-11-05
OSVCLSA-2026-1771546208 No score

TuxCare security update for braces (1 CVE)

TuxCare rebuilt braces to address 1 CVE. Fixed in 2.3.2-tuxcare.1.

Record
CLSA-2026-1771546208
Updated
2026-11-02
OSVCLSA-2026-1771805413 No score

TuxCare security update for braces (1 CVE)

TuxCare rebuilt braces to address 1 CVE. Fixed in 1.8.5-tuxcare.1.

Record
CLSA-2026-1771805413
Updated
2026-11-02
OSVCLSA-2026-1776731778 No score

TuxCare security update for braces (1 CVE)

TuxCare rebuilt braces to address 1 CVE. Fixed in 0.1.5-tuxcare.1.

Record
CLSA-2026-1776731778
Updated
2026-11-02
OSVCLSA-2026-1777509592 No score

TuxCare security update for braces (1 CVE)

TuxCare rebuilt braces to address 1 CVE. Fixed in 2.3.1-tuxcare.1.

Record
CLSA-2026-1777509592
Updated
2026-11-02
OSVCLSA-2026-1780879899 No score

TuxCare security update for braces (1 CVE)

TuxCare rebuilt braces to address 1 CVE. Fixed in 3.0.2-tuxcare.1.

Record
CLSA-2026-1780879899
Updated
2026-11-02
OSVopenSUSE-SU-2024:14257-1 No score

traefik-3.1.2-1.1 on GA media

These are all security issues fixed in the traefik-3.1.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14257-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14258-1 No score

traefik2-2.11.8-1.1 on GA media

These are all security issues fixed in the traefik2-2.11.8-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14258-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:14663-1 No score

velociraptor-0.7.0.4.git142.862ef23-1.1 on GA media

These are all security issues fixed in the velociraptor-0.7.0.4.git142.862ef23-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14663-1
Updated
2026-11-02
OSVROOT-APP-NPM-CVE-2024-4068 No score

CVE-2024-4068 in braces - Patched by Root

Root has patched CVE-2024-4068 in the braces package for Root:npm. Multiple fixed versions available.

Record
ROOT-APP-NPM-CVE-2024-4068
Updated
2026-11-02
OSVSUSE-SU-2024:3771-1 No score

Security update for pgadmin4

This update for pgadmin4 fixes the following issues:

  • CVE-2024-38355: Fixed socket.io: unhandled 'error' event (bsc#1226967)
  • CVE-2024-38998: Fixed requirejs: prototype pollution via function config (bsc#1227248)
  • CVE-2024-38999: Fixed requirejs: prototype pollution via function s.contexts._.configure (bsc#1227252)
  • CVE-2024-39338: Fixed axios: server-side request forgery due to requests for path relative URLs being processed as protocol relative URLs in axios (bsc#1229423)
  • CVE-2024-4067: Fixed micromatch: vulnerable to Regular Expression Denial of Service (ReDoS) (bsc#1224366)
  • CVE-2024-4068: Fixed braces: fails to limit the number of characters it can handle, which could lead to Memory Exhaustion (bsc#1224295)
  • CVE-2024-43788: Fixed webpack: DOM clobbering gadget in AutoPublicPathRuntimeModule could lead to XSS (bsc#1229861)
  • CVE-2024-48948: Fixed elliptic: ECDSA signature verification error due to leading zero may reject legitimate transactions in elliptic (bsc#1231684)
  • CVE-2024-48949: Fixed elliptic: Missing Validation in Elliptic's EDDSA Signature Verification (bsc#1231564)
  • CVE-2024-9014: Fixed OAuth2 issue that could lead to information leak (bsc#1230928)
Record
SUSE-SU-2024:3771-1
Updated
2026-11-02
OSVSUSE-SU-2025:01326-1 No score

Security update for pgadmin4

This update for pgadmin4 fixes the following issues:

  • CVE-2025-27152: Fixed SSRF and creadential leakage due to requests sent to absolute URL even when baseURL is set (bsc#1239308)
  • CVE-2023-1907: Fixed an issue which could result in users being authenticated in another user's session if two users authenticate simultaneously via ldap (bsc#1234840)
  • CVE-2024-4068: Fixed a possible memory exhaustion (bsc#1224295)
Record
SUSE-SU-2025:01326-1
Updated
2026-11-02
OSVSUSE-SU-2025:1326-1 No score

Security update for pgadmin4

This update for pgadmin4 fixes the following issues:

  • CVE-2025-27152: Fixed SSRF and creadential leakage due to requests sent to absolute URL even when baseURL is set (bsc#1239308)
  • CVE-2023-1907: Fixed an issue which could result in users being authenticated in another user's session if two users authenticate simultaneously via ldap (bsc#1234840)
  • CVE-2024-4068: Fixed a possible memory exhaustion (bsc#1224295)
Record
SUSE-SU-2025:1326-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
braces
npm
 before 3.0.3
3.0.3
reaper
Azure Linux:2
 before 3.1.1-9
3.1.1-9
nodejs-nodemon
Azure Linux:2
 through 2.0.3-4 None known
nodejs-nodemon
Azure Linux:3
 through 2.0.3-5 None known
braces
TuxCare:npm
 2.3.2-tuxcare.0 up to 2.3.2-tuxcare.1, plus listed versions
2.3.2
2.3.2-tuxcare.1
braces
TuxCare:npm
 1.8.5-tuxcare.0 up to 1.8.5-tuxcare.1, plus listed versions
1.8.5
1.8.5-tuxcare.1
braces
TuxCare:npm
 0.1.5-tuxcare.0 up to 0.1.5-tuxcare.1, plus listed versions
0.1.5
0.1.5-tuxcare.1
braces
TuxCare:npm
 2.3.1-tuxcare.0 up to 2.3.1-tuxcare.1, plus listed versions
2.3.1
2.3.1-tuxcare.1
braces
TuxCare:npm
 3.0.2-tuxcare.0 up to 3.0.2-tuxcare.1, plus listed versions
3.0.2
3.0.2-tuxcare.1
node-braces
Debian:12
 All versions, plus listed versions
3.0.2+~3.0.1-13.0.3+~3.0.4-13.0.3+~3.0.5-1
 None known
Show 115 moreShow less
Affected packages
PackageAffectedFixed
node-braces
Debian:13
 before 3.0.3+~3.0.4-1
3.0.3+~3.0.4-1
node-braces
Debian:14
 before 3.0.3+~3.0.4-1
3.0.3+~3.0.4-1
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:3.3.24-1.Final_redhat_00001.1.el7eap
0:3.3.24-1.Final_redhat_00001.1.el7eap
eap7-hibernate-validator
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:6.0.23-2.SP1_redhat_00001.1.el7eap
0:6.0.23-2.SP1_redhat_00001.1.el7eap
eap7-hibernate-validator-cdi
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:6.0.23-2.SP1_redhat_00001.1.el7eap
0:6.0.23-2.SP1_redhat_00001.1.el7eap
eap7-insights-java-client
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:1.1.3-1.redhat_00001.1.el7eap
0:1.1.3-1.redhat_00001.1.el7eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el7eap
0:1.5.18-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el7eap
0:1.5.18-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el7eap
0:1.5.18-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el7eap
0:1.5.18-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el7eap
0:1.5.18-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el7eap
0:1.5.18-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el7eap
0:1.5.18-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el7eap
0:1.5.18-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el7eap
0:1.5.18-1.Final_redhat_00001.1.el7eap
eap7-jboss-cert-helper
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:1.1.3-1.redhat_00001.1.el7eap
0:1.1.3-1.redhat_00001.1.el7eap
eap7-jboss-cert-helper-debuginfo
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:1.1.3-1.redhat_00001.1.el7eap
0:1.1.3-1.redhat_00001.1.el7eap
eap7-jboss-ejb-client
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:4.0.55-1.Final_redhat_00001.1.el7eap
0:4.0.55-1.Final_redhat_00001.1.el7eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:1.10.0-39.Final_redhat_00039.1.el7eap
0:1.10.0-39.Final_redhat_00039.1.el7eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:1.10.0-39.Final_redhat_00039.1.el7eap
0:1.10.0-39.Final_redhat_00039.1.el7eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:1.10.0-39.Final_redhat_00039.1.el7eap
0:1.10.0-39.Final_redhat_00039.1.el7eap
eap7-jbossws-cxf
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:5.4.12-1.Final_redhat_00001.1.el7eap
0:5.4.12-1.Final_redhat_00001.1.el7eap
eap7-jsoup
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:1.15.4-1.redhat_00003.1.el7eap
0:1.15.4-1.redhat_00003.1.el7eap
eap7-undertow-jastow
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.0.15-1.Final_redhat_00001.1.el7eap
0:2.0.15-1.Final_redhat_00001.1.el7eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:7.4.19-1.GA_redhat_00002.1.el7eap
0:7.4.19-1.GA_redhat_00002.1.el7eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:7.4.19-1.GA_redhat_00002.1.el7eap
0:7.4.19-1.GA_redhat_00002.1.el7eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:7.4.19-1.GA_redhat_00002.1.el7eap
0:7.4.19-1.GA_redhat_00002.1.el7eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:7.4.19-1.GA_redhat_00002.1.el7eap
0:7.4.19-1.GA_redhat_00002.1.el7eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:7.4.19-1.GA_redhat_00002.1.el7eap
0:7.4.19-1.GA_redhat_00002.1.el7eap
eap7-xalan-j2
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 5 CVEs
 before 0:2.7.1-37.redhat_00015.1.el7eap
0:2.7.1-37.redhat_00015.1.el7eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:3.3.24-1.Final_redhat_00001.1.el8eap
0:3.3.24-1.Final_redhat_00001.1.el8eap
eap7-hibernate-validator
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:6.0.23-2.SP1_redhat_00001.1.el8eap
0:6.0.23-2.SP1_redhat_00001.1.el8eap
eap7-hibernate-validator-cdi
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:6.0.23-2.SP1_redhat_00001.1.el8eap
0:6.0.23-2.SP1_redhat_00001.1.el8eap
eap7-insights-java-client
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:1.1.3-1.redhat_00001.1.el8eap
0:1.1.3-1.redhat_00001.1.el8eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el8eap
0:1.5.18-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el8eap
0:1.5.18-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el8eap
0:1.5.18-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el8eap
0:1.5.18-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el8eap
0:1.5.18-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el8eap
0:1.5.18-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el8eap
0:1.5.18-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el8eap
0:1.5.18-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el8eap
0:1.5.18-1.Final_redhat_00001.1.el8eap
eap7-jboss-cert-helper
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:1.1.3-1.redhat_00001.1.el8eap
0:1.1.3-1.redhat_00001.1.el8eap
eap7-jboss-ejb-client
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:4.0.55-1.Final_redhat_00001.1.el8eap
0:4.0.55-1.Final_redhat_00001.1.el8eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:1.10.0-39.Final_redhat_00039.1.el8eap
0:1.10.0-39.Final_redhat_00039.1.el8eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:1.10.0-39.Final_redhat_00039.1.el8eap
0:1.10.0-39.Final_redhat_00039.1.el8eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:1.10.0-39.Final_redhat_00039.1.el8eap
0:1.10.0-39.Final_redhat_00039.1.el8eap
eap7-jbossws-cxf
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:5.4.12-1.Final_redhat_00001.1.el8eap
0:5.4.12-1.Final_redhat_00001.1.el8eap
eap7-jsoup
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:1.15.4-1.redhat_00003.1.el8eap
0:1.15.4-1.redhat_00003.1.el8eap
eap7-undertow-jastow
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.0.15-1.Final_redhat_00001.1.el8eap
0:2.0.15-1.Final_redhat_00001.1.el8eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:7.4.19-1.GA_redhat_00002.1.el8eap
0:7.4.19-1.GA_redhat_00002.1.el8eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:7.4.19-1.GA_redhat_00002.1.el8eap
0:7.4.19-1.GA_redhat_00002.1.el8eap
eap7-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:7.4.19-1.GA_redhat_00002.1.el8eap
0:7.4.19-1.GA_redhat_00002.1.el8eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:7.4.19-1.GA_redhat_00002.1.el8eap
0:7.4.19-1.GA_redhat_00002.1.el8eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:7.4.19-1.GA_redhat_00002.1.el8eap
0:7.4.19-1.GA_redhat_00002.1.el8eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:7.4.19-1.GA_redhat_00002.1.el8eap
0:7.4.19-1.GA_redhat_00002.1.el8eap
eap7-xalan-j2
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 5 CVEs
 before 0:2.7.1-37.redhat_00015.1.el8eap
0:2.7.1-37.redhat_00015.1.el8eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:3.3.24-1.Final_redhat_00001.1.el9eap
0:3.3.24-1.Final_redhat_00001.1.el9eap
eap7-hibernate-validator
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:6.0.23-2.SP1_redhat_00001.1.el9eap
0:6.0.23-2.SP1_redhat_00001.1.el9eap
eap7-hibernate-validator-cdi
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:6.0.23-2.SP1_redhat_00001.1.el9eap
0:6.0.23-2.SP1_redhat_00001.1.el9eap
eap7-insights-java-client
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:1.1.3-1.redhat_00001.1.el9eap
0:1.1.3-1.redhat_00001.1.el9eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el9eap
0:1.5.18-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el9eap
0:1.5.18-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el9eap
0:1.5.18-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el9eap
0:1.5.18-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el9eap
0:1.5.18-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el9eap
0:1.5.18-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el9eap
0:1.5.18-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el9eap
0:1.5.18-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:1.5.18-1.Final_redhat_00001.1.el9eap
0:1.5.18-1.Final_redhat_00001.1.el9eap
eap7-jboss-cert-helper
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:1.1.3-1.redhat_00001.1.el9eap
0:1.1.3-1.redhat_00001.1.el9eap
eap7-jboss-ejb-client
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:4.0.55-1.Final_redhat_00001.1.el9eap
0:4.0.55-1.Final_redhat_00001.1.el9eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:1.10.0-39.Final_redhat_00039.1.el9eap
0:1.10.0-39.Final_redhat_00039.1.el9eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:1.10.0-39.Final_redhat_00039.1.el9eap
0:1.10.0-39.Final_redhat_00039.1.el9eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:1.10.0-39.Final_redhat_00039.1.el9eap
0:1.10.0-39.Final_redhat_00039.1.el9eap
eap7-jbossws-cxf
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:5.4.12-1.Final_redhat_00001.1.el9eap
0:5.4.12-1.Final_redhat_00001.1.el9eap
eap7-jsoup
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:1.15.4-1.redhat_00003.1.el9eap
0:1.15.4-1.redhat_00003.1.el9eap
eap7-undertow-jastow
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.0.15-1.Final_redhat_00001.1.el9eap
0:2.0.15-1.Final_redhat_00001.1.el9eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:7.4.19-1.GA_redhat_00002.1.el9eap
0:7.4.19-1.GA_redhat_00002.1.el9eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:7.4.19-1.GA_redhat_00002.1.el9eap
0:7.4.19-1.GA_redhat_00002.1.el9eap
eap7-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:7.4.19-1.GA_redhat_00002.1.el9eap
0:7.4.19-1.GA_redhat_00002.1.el9eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:7.4.19-1.GA_redhat_00002.1.el9eap
0:7.4.19-1.GA_redhat_00002.1.el9eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:7.4.19-1.GA_redhat_00002.1.el9eap
0:7.4.19-1.GA_redhat_00002.1.el9eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:7.4.19-1.GA_redhat_00002.1.el9eap
0:7.4.19-1.GA_redhat_00002.1.el9eap
eap7-xalan-j2
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 5 CVEs
 before 0:2.7.1-37.redhat_00015.1.el9eap
0:2.7.1-37.redhat_00015.1.el9eap
braces
Root:npm
 before 3.0.2-aikido.2
3.0.2-aikido.22.3.2-aikido.23.0.2-aikido.32.3.2-aikido.33.0.3-aikido.1
@rootio/braces
Root:npm
 before 3.0.2-root.io.1
3.0.2-root.io.12.3.2-root.io.13.0.2-root.io.22.3.2-root.io.23.0.2-root.io.32.3.2-root.io.33.0.3-root.io.1
pgadmin4
SUSE:Linux Enterprise Module for Python 3 15 SP6
From an advisory covering 10 CVEs
 before 8.5-150600.3.6.1
8.5-150600.3.6.1
pgadmin4
openSUSE:Leap 15.6
From an advisory covering 10 CVEs
 before 8.5-150600.3.6.1
8.5-150600.3.6.1
pgadmin4
SUSE:Linux Enterprise Module for Python 3 15 SP6
From an advisory covering 3 CVEs
 before 4.30-150300.3.18.1
4.30-150300.3.18.1
pgadmin4
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 4.30-150300.3.18.1
4.30-150300.3.18.1
pgadmin4
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 4.30-150300.3.18.1
4.30-150300.3.18.1
pgadmin4
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 4.30-150300.3.18.1
4.30-150300.3.18.1
pgadmin4
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 3 CVEs
 before 4.30-150300.3.18.1
4.30-150300.3.18.1
pgadmin4
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 4.30-150300.3.18.1
4.30-150300.3.18.1
pgadmin4
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 4.30-150300.3.18.1
4.30-150300.3.18.1
pgadmin4
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 4.30-150300.3.18.1
4.30-150300.3.18.1
pgadmin4
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 4.30-150300.3.18.1
4.30-150300.3.18.1
pgadmin4
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 3 CVEs
 before 4.30-150300.3.18.1
4.30-150300.3.18.1
pgadmin4
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 4.30-150300.3.18.1
4.30-150300.3.18.1
pgadmin4
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 3 CVEs
 before 4.30-150300.3.18.1
4.30-150300.3.18.1
pgadmin4
SUSE:Manager Proxy 4.3
From an advisory covering 3 CVEs
 before 4.30-150300.3.18.1
4.30-150300.3.18.1
pgadmin4
SUSE:Manager Server 4.3
From an advisory covering 3 CVEs
 before 4.30-150300.3.18.1
4.30-150300.3.18.1
pgadmin4
SUSE:Enterprise Storage 7.1
From an advisory covering 3 CVEs
 before 4.30-150300.3.18.1
4.30-150300.3.18.1
node-braces
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.0.2-12.0.2-2
 None known
node-braces
Ubuntu:20.04:LTS
 All versions, plus listed versions
3.0.2-2
 None known
node-braces
Ubuntu:22.04:LTS
 All versions, plus listed versions
3.0.2+~3.0.0-13.0.2+~3.0.1-1
 None known
node-braces
Ubuntu:24.04:LTS
 All versions, plus listed versions
3.0.2+~3.0.1-1
 None known
node-braces
Ubuntu:25.10
 All versions, plus listed versions
3.0.3+~3.0.4-13.0.3+~3.0.5-1
 None known
node-braces
Ubuntu:26.10
 All versions, plus listed versions
3.0.3+~3.0.5-1
 None known
node-braces
Ubuntu:26.04:LTS
 All versions, plus listed versions
3.0.3+~3.0.5-1
 None known
traefik
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 3.1.2-1.1
3.1.2-1.1
traefik2
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 2.11.8-1.1
2.11.8-1.1
velociraptor
openSUSE:Tumbleweed
From an advisory covering 27 CVEs
 before 0.7.0.4.git142.862ef23-1.1
0.7.0.4.git142.862ef23-1.1

History

History
RecordedChangedSources
affected
factsOSV
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-4068 is a high vulnerability (CVSS 7.5) in Jonschlinkert Braces, published May 13, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 73rd percentile. Fixed in braces 3.0.3.

References

Show 103 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open