Start for Free
npm

minimatch

View on npm registry
6 Total advisories
6 Vulnerabilities
0 Malware

Dependency scanning

Check whether minimatch is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

UNKNOWN
npm

CVE-2026-118764

minimatch has potential denial of service via globparts amplification
HIGH 7.5
npm

CVE-2026-27904

minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions
HIGH 7.5
npm

CVE-2026-27903

minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments
UNKNOWN
npm

CVE-2026-26996

minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern
HIGH 7.5
npm

CVE-2022-3517

minimatch ReDoS vulnerability
HIGH 7.5
npm

CVE-2016-10540

Regular Expression Denial of Service in minimatch

Browse more npm advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes