What’s Vulnerable › Products

isaacs minimatch vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your isaacs minimatch version is affected

Latest isaacs minimatch vulnerabilities

• CVE-2026-27904 — minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions (CVSS 7.5)
• CVE-2026-27903 — minimatch has a ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments (CVSS 7.5)
• CVE-2026-26996 — minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern (CVSS 7.5)
• CVE-2022-3517 — minimatch ReDoS vulnerability (CVSS 7.5)
• CVE-2016-10540 — (CVSS 7.5)