Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript RegExp objects. The primary function, minimatch(path, pattern) in Minimatch 3.0.1 and earlier is vulnerable to ReDoS in the pattern parameter.
HIGH Vulnerable Package issue exists @ minimatch in branch master
Description
Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript
RegExpobjects. The primary function,minimatch(path, pattern)in Minimatch 3.0.1 and earlier is vulnerable to ReDoS in thepatternparameter.HIGH Vulnerable Package issue exists @ minimatch in branch master
Vulnerability ID: CVE-2016-10540
Package Name: minimatch
Severity: HIGH
CVSS Score: 7.5
Publish Date: 2018-05-31T20:29:00
Current Package Version: 2.0.10
Remediation Upgrade Recommendation: 3.0.5
Link To SCA
Reference – NVD link