Login Request a demo
MI
Product
minimatch
by isaacs · last CVE Oct 29, 2026
4
CVEs
0
On KEV
8.7
Max CVSS
1
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 4Medium 0Low 0
Severity
All severities4Critical0High4Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add minimatch to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-118764
New
8.7–Oct 29
minimatch: potential denial of service via globparts amplification
Affected: < 11.0.1
CVE-2026-27904
7.5
1%
Feb 26
minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions
Affected: >= 10.0.0, < 10.2.3; >= 9.0.0, < 9.0.7; >= 8.0.0, < 8.0.6; >= 7.0.0, < 7.4.8; >= 6.0.0, < 6.2.2; >= 5.0.0, < 5.1.8; +2 more
CVE-2026-27903
7.5
1%
Feb 26
minimatch has a ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments
Affected: >= 10.0.0, < 10.2.3; >= 9.0.0, < 9.0.7; >= 8.0.0, < 8.0.6; >= 7.0.0, < 7.4.8; >= 6.0.0, < 6.2.2; >= 5.0.0, < 5.1.8; +2 more
CVE-2026-26996
7.5
1%
Feb 20
minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern
Affected: < 10.2.1
Showing 4