Skip to content

[HIGH] minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments #2959

Open
Open
[HIGH] minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments#2959
Labels
dependabot-security-findingneeds-triagePriority and effort undetermined yetpriority/p0Needs to be addressed immediately
@cdk8s-automation

Description

@cdk8s-automation
cdk8s-automation
opened on Mar 2, 2026

Github reported a new dependabot security alert at: https://github.com/cdk8s-team/cdk8s/security/dependabot/64

Metadata

Metadata

Assignees

No one assigned

    Labels

    dependabot-security-findingneeds-triagePriority and effort undetermined yetpriority/p0Needs to be addressed immediately

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions
      ⚡