[Git][security-tracker-team/security-tracker][master] Add CVE-2026-14257/node-brace-expansion

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e0afd179 by Salvatore Bonaccorso at 2026-07-25T07:42:57+02:00
Add CVE-2026-14257/node-brace-expansion

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1331,7 +1331,8 @@ CVE-2026-14481 (The Equalize Digital Accessibility Checker \u2013 WCAG, ADA, EAA
 CVE-2026-14282 (The GoDAM \u2013 Organize WordPress Media Library & File Manager with  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-14257 (brace-expansion through 5.0.7 is vulnerable to denial of service via m ...)
-	TODO: check
+	- node-brace-expansion <unfixed>
+	NOTE: https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5 (v5.0.8)
 CVE-2026-13119 (The Registrations For The Events Calendar plugin for WordPress is vuln ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-13009 (The AI Copilot \u2013 Content Generator plugin for WordPress is vulner ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e0afd179ee9c061e641b40f53d4416c0aceb2b79

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e0afd179ee9c061e641b40f53d4416c0aceb2b79
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260725/27621989/attachment.htm>