From 744fca1dc39b3aa8cab81b39a67993168258a857 Mon Sep 17 00:00:00 2001 From: Naveen Sharma <90162358+naveensharmatech@users.noreply.github.com> Date: Sat, 3 Oct 2026 16:31:03 +0300 Subject: [PATCH] Improve GHSA-vfj7-8cjw-p6xm --- .../2026/09/GHSA-vfj7-8cjw-p6xm/GHSA-vfj7-8cjw-p6xm.json | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/advisories/github-reviewed/2026/09/GHSA-vfj7-8cjw-p6xm/GHSA-vfj7-8cjw-p6xm.json b/advisories/github-reviewed/2026/09/GHSA-vfj7-8cjw-p6xm/GHSA-vfj7-8cjw-p6xm.json index 701e2b6878f..9db455a1307 100644 --- a/advisories/github-reviewed/2026/09/GHSA-vfj7-8cjw-p6xm/GHSA-vfj7-8cjw-p6xm.json +++ b/advisories/github-reviewed/2026/09/GHSA-vfj7-8cjw-p6xm/GHSA-vfj7-8cjw-p6xm.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-vfj7-8cjw-p6xm", - "modified": "2026-10-02T22:36:33Z", + "modified": "2026-10-02T22:36:34Z", "published": "2026-09-18T18:31:41Z", "aliases": [ "CVE-2026-93687" @@ -9,10 +9,6 @@ "summary": "braces vulnerable to stack-exhaustion denial of service through deeply nested patterns", "details": "braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError.", "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" - }, { "type": "CVSS_V4", "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"