brace-expansion library generates arbitrary strings containing a common prefix and suffix
Details
CVE-2026-102276 affects multiple packages. The brace-expansion library generates arbitrary strings containing a common prefix and suffix. See references for individual vulnerability details.