cvedb.io
CVE-2016-10540
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2018-05-31T20:29:01.457 · Last modified 2026-06-17T00:39:54.237

Summary

Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript `RegExp` objects. The primary function, `minimatch(path, pattern)` in Minimatch 3.0.1 and earlier is vulnerable to ReDoS in the `pattern` parameter.

Affected products

minimatch_project — minimatch

Does this affect you?

Add your gear to cvedb and we'll alert you only when minimatch_project ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.