Cloudanix VulnDB

GHSA-3ppc-4f35-3m26

None

CVSS

—

EPSS

—

Published

Feb 18, 2026

CISA due date

—

The record

minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern

Affected packages

Ecosystem Package Introduced Fixed
npm minimatch 0 3.1.3
npm minimatch 10.0.0 10.2.1
npm minimatch 4.0.0 4.2.4
npm minimatch 5.0.0 5.1.7
npm minimatch 6.0.0 6.2.1
npm minimatch 7.0.0 7.4.7
npm minimatch 8.0.0 8.0.5
npm minimatch 9.0.0 9.0.6
Chainguard actions-runner 0 2.332.0-r0
Chainguard arangodb-3.11 0 3.11.14.3-r1
Chainguard arangodb-3.12 0 3.12.7.2-r2
Chainguard code-server 0 4.106.3-r5
Chainguard emscripten 0 5.0.1-r2
Chainguard eslint 0 10.0.1-r0
Chainguard foxx-cli 0 2.1.1-r4
Chainguard gemini-cli 0 0.30.0-r0
Chainguard graalvm-25-ce-nodejs 0 25.0.2-r3
Chainguard kibana-8.17 0 8.17.10-r12
Chainguard kibana-8.17-bitnami 0 8.17.10-r12
Chainguard kibana-8.17-iamguarded 0 8.17.10-r12
Chainguard kibana-8.19 0 8.19.12-r2
Chainguard kibana-8.19-bitnami 0 8.19.12-r2
Chainguard kibana-8.19-iamguarded 0 8.19.12-r2
Chainguard kibana-9.0 0 9.0.8-r13
Chainguard kibana-9.0-bitnami 0 9.0.8-r13
Chainguard kibana-9.0-iamguarded 0 9.0.8-r13
Chainguard kibana-9.1 0 9.1.10-r6
Chainguard kibana-9.1-iamguarded 0 9.1.10-r6
Chainguard kibana-9.2 0 9.2.5-r5
Chainguard kibana-9.2-iamguarded 0 9.2.5-r5
Chainguard kibana-9.3 0 9.3.0-r2
Chainguard kibana-9.3-iamguarded 0 9.3.0-r2
Chainguard kubeflow-centraldashboard 0 1.10.0-r12
Chainguard kubeflow-pipelines-frontend 0 2.16.0-r0
Chainguard langfuse-2-worker 0 2.95.12-r11
Chainguard langfuse-3 0 3.155.1-r2
Chainguard langfuse-3-worker 0 3.155.1-r2
Chainguard langfuse-fips-2-worker 0 2.95.12-r13
Chainguard langfuse-fips-3 0 3.155.1-r1
Chainguard langfuse-fips-3-worker 0 3.155.1-r1
Chainguard lerna 0 9.0.4-r3
Chainguard librechat 0 0.8.2-r5
Chainguard node-gyp 0 12.2.0-r2
Chainguard npm 0 11.10.1-r0
Chainguard opensearch-dashboards-2 0 2.19.4-r15
Chainguard opensearch-dashboards-2-dashboards-reporting 0 2.19.4-r15
Chainguard opensearch-dashboards-2-fips 0 2.19.4-r13
Chainguard opensearch-dashboards-2-fips-dashboards-reporting 0 2.19.4-r13
Chainguard opensearch-dashboards-3 0 3.5.0-r6
Chainguard opensearch-dashboards-3-dashboards-reporting 0 3.5.0-r6
Chainguard opentelemetry-auto-instrumentations-node 0 0.70.0-r1
Chainguard pelias-api 0 7.6.0-r3
Chainguard prism 0 5.14.3-r8
Chainguard pulumi-language-nodejs 0 3.223.0-r1
Chainguard rancher-api-ui 0 1.2.3-r5
Chainguard redisinsight 0 3.0.3-r1
Chainguard renovate 0 43.38.0-r1
Chainguard serve 0 14.2.6-r0
Chainguard sqlpad 0 7.5.7-r10
Chainguard tileserver-gl 0 5.5.0-r5
Chainguard tileserver-gl-fips 0 5.5.0-r6
Chainguard vitess-22 0 22.0.3-r2
Chainguard vitess-23 0 23.0.2-r1
Wolfi code-server 0 4.106.3-r5
Wolfi eslint 0 10.0.1-r0
Wolfi kubeflow-centraldashboard 0 1.10.0-r12
Wolfi kubeflow-pipelines-frontend 0 2.16.0-r0
Wolfi langfuse-3 0 3.155.1-r2
Wolfi langfuse-3-worker 0 3.155.1-r2
Wolfi lerna 0 9.0.4-r3
Wolfi node-gyp 0 12.2.0-r2
Wolfi npm 0 11.10.1-r0
Wolfi opensearch-dashboards-2 0 2.19.4-r15
Wolfi opensearch-dashboards-2-dashboards-reporting 0 2.19.4-r15
Wolfi opensearch-dashboards-3 0 3.5.0-r6
Wolfi opensearch-dashboards-3-dashboards-reporting 0 3.5.0-r6
Wolfi prism 0 5.14.3-r8
Wolfi pulumi-language-nodejs 0 3.223.0-r1
Wolfi rancher-api-ui 0 1.2.3-r5
Wolfi renovate 0 43.38.0-r1
Wolfi serve 0 14.2.6-r0
Wolfi sqlpad 0 7.5.7-r10
Wolfi tileserver-gl 0 5.5.0-r5
Wolfi vitess-22 0 22.0.3-r2
Wolfi vitess-23 0 23.0.2-r1

Related vulnerabilities