minimatch vulnerabilities (Root)

4 vulnerabilities.

• minimatch Root minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions CVE-2026-27904 Fix available 7.5 HighFebruary 26, 2026
• minimatch Root minimatch has a ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments CVE-2026-27903 Fix available 7.5 HighFebruary 26, 2026
• minimatch Root minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern CVE-2026-26996 Fix available 8.7 HighFebruary 18, 2026
• minimatch Root minimatch ReDoS vulnerability CVE-2022-3517 Fix available 7.5 HighOctober 17, 2022