[Security] minimatch — No CVE listed

[bitskc]

Vulnerability in minimatch

Severity: high
CVE: No CVE listed
Vulnerable range: 9.0.0 - 9.0.6
Advisory: GHSA-3ppc-4f35-3m26; GHSA-7r86-cg39-jmmj; GHSA-23c5-xmqv-rm74
Description: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern; minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments; minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions

Fix recommendation

Run npm audit fix to resolve this vulnerability.

Affected paths

node_modules/@typescript-eslint/typescript-estree/node_modules/minimatch

---

Automatically detected by dependency vulnerability scan.