micromatch picomatch vulnerabilities

3 published CVEs name micromatch picomatch among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 3
Critical: 0
Known exploited: 0

Critical 0High 2Medium 1Low 0Not scored 0

Newest CVEs

CVE-2026-112366
Picomatch through 4.0.7 ReDoS via single-branch repeated extglob patterns
micromatch · picomatch
High8.7
CVE-2026-33672
Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching
micromatch · picomatch
Medium5.3
CVE-2026-33671
Picomatch has a ReDoS vulnerability via extglob quantifiers
micromatch · picomatch
High7.5

Most common weaknesses