CLEANSTART-2026-ID18571

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ID18571.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-ID18571
Upstream
  • ghsa-35p6-xmwp-9g52
  • ghsa-3ppc-4f35-3m26
  • ghsa-83g3-92jg-28cx
  • ghsa-g8m3-5g58-fq7m
  • ghsa-jxxr-4gwj-5jf2
  • ghsa-p88m-4jfj-68fv
  • ghsa-qffp-2rhf-9h96
  • ghsa-r292-9mhp-454m
  • ghsa-vxpw-j846-p89q
Published
2026-09-08T00:57:16Z
Modified
2026-09-08T02:30:04Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
brace-expansion through 5
Details

Multiple security vulnerabilities affect the npm package. brace-expansion through 5. See references for individual vulnerability details.

References

Affected packages

CleanStart / npm

Package

Name
npm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.1.4-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ID18571.json"