Jonschlinkert
6 CVEs across 5 Jonschlinkert products. Browse Jonschlinkert vulnerabilities, severities, and proof-of-concept exploits.
Jonschlinkert products with known CVEs
Jonschlinkert CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-33672 | Medium | 5.3 | 2026-03-26 | Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the `POS… |
CVE-2026-33671 | High | 7.5 | 2026-03-26 | Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) when p… |
CVE-2025-57328 | High | 7.5 | 2025-09-24 | toggle-array is a package designed to enables a property on the object at the specified index, while disabling the property on all other objects. A Prototype P… |
CVE-2025-25975 | High | 7.5 | 2025-03-12 | An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function |
CVE-2024-4068 | High | 7.5 | 2024-05-14 | The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In `lib/parse… |
CVE-2024-4067 | Medium | 5.3 | 2024-05-14 | The NPM package `micromatch` prior to 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability occurs in `micromatch.braces()` in… |