micromatch picomatch vulnerabilities
3 published CVEs name micromatch picomatch among the affected products.
- 3Published CVEs3 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-112366
Picomatch through 4.0.7 ReDoS via single-branch repeated extglob patterns
micromatch · picomatch
High8.7 - CVE-2026-33672
Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching
micromatch · picomatch
Medium5.3 - CVE-2026-33671
Picomatch has a ReDoS vulnerability via extglob quantifiers
micromatch · picomatch
High7.5