micromatch

Products

ProductCVEsExploitedLatest
picomatch3–Oct 19, 2026
braces2–Sep 18, 2026
micromatch1–May 13, 2024

Exploited and recent CVEs

  • CVE-2026-112366 High 7.5 Picomatch through 4.0.7 ReDoS via single-branch repeated extglob patterns 0.3%
  • CVE-2026-93687 High 7.5 braces through 3.0.3 Stack Overflow via Deeply Nested Patterns 0.8%
  • CVE-2026-33672 Medium 5.3 Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching 0.4%
  • CVE-2026-33671 High 7.5 Picomatch has a ReDoS vulnerability via extglob quantifiers 0.4%
  • CVE-2024-4068 High 7.5 Memory Exhaustion in braces 1.5%
  • CVE-2024-4067 Medium 5.3 Regular Expression Denial of Service in micromatch 1.4%