CVE-2016-10540 More information
high severity
Vulnerable versions: < 3.0.2
Patched version: 3.0.2
Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript RegExp objects. The primary function, minimatch(path, pattern) in Minimatch 3.0.1 and earlier is vulnerable to ReDoS in the pattern parameter.