isaacs minimatch

• CVE-2026-118764 Medium 6.9 minimatch: potential denial of service via globparts amplification 0.3%
• CVE-2026-27904 High 7.5 minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions 0.5%
• CVE-2026-27903 High 7.5 minimatch has a ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments 0.6%
• CVE-2026-26996 High 8.7 minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern 0.6%