Fix security issue in brace-expansion via minor version upgrade from 1.1.11 to 1.1.12 by aikido-autofix[bot] · Pull Request #150 · settlemint/settlemint-action

aikido-autofix · 2025-06-13T22:30:53Z

This PR will resolve the following CVEs:

CVE ID	Severity	Description
CVE-2025-5889	LOW	A vulnerability was found in juliangruber brace-expansion up to 1.1.11/2.0.1/3.0.0/4.0.0. It has been rated as problematic. Affected by this issue is the function expand of the file index.js. The manipulation leads to inefficient regular expression complexity. The attack may be launched remotely. Th...

update brace-expansion from 1.1.11 to 1.1.12

c0f244b

This comment was marked as outdated.

Sign in to view

update

2c96e8e

janb87 approved these changes Jul 2, 2025

View reviewed changes

janb87 merged commit 7a7baec into main Jul 2, 2025
8 checks passed

janb87 deleted the fix/aikido-security-update-packages-4887280-htoW branch July 2, 2025 15:47

Provide feedback