minimatch
npmlatest 11.0.4 · 2026-11-02www.npmjs.com · all 150 versions
Security advisories5
- minimatch: minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressionsfixed in 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4
- minimatch: minimatch has a ReDoS via repeated wildcards with non-matching literal in patternfixed in 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3
- minimatch: minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segmentsfixed in 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3
- minimatch: minimatch ReDoS vulnerabilityfixed in 3.0.5
- minimatch: minimatch has potential denial of service via globparts amplificationfixed in 11.0.1
Versions that change something
- 6.2.12026-02fixes 1 advisory
- 6.2.22026-02fixes 2 advisories
- 7.4.72026-02fixes 1 advisory
- 7.4.82026-02fixes 2 advisories
What each upgrade changes in its API
- Changes argument countsbreaks on upgrade→ 10.2.6· 2→ 11.0.2· 2→ 11.0.3· 2
- Changes typesbreaks on upgrade→ 10.2.6· 11→ 11.0.2