CVE-2022-3517 - AskarLabs CVE Database

CVE-2022-3517

Vendor N/A

Product minimatch

Weakness CWE-400

Published October 17, 2022

Last update May 13, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service.

Key dates

02Disclosure timeline

October 17, 2022 CVE published

May 13, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-3517 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/400.html

Related vulnerabilities

04Related CVE

CVE-2023-36841 Junos OS: MX Series: Receipt of malformed TCP traffic will cause a Denial of Service CVE-2026-47071 SOCKS5 TLS upgrade ignores caller timeout in hackney CVE-2024-24762 python-multipart vulnerable to content-type header Regular expression Denial of Service CVE-2023-42457 plone.rest vulnerable to Denial of Service when ++api++ is used many times CVE-2022-33303 Uncontrolled resource consumption in Linux kernel