{"source":1119088,"name":"brace-expansion","dependency":"brace-expansion","title":"brace-expansion: Large numeric range defeats documented `max` DoS protection","url":"https://github.com/advisories/GHSA-jxxr-4gwj-5jf2","severity":"moderate","versions":["0.0.0","1.0.0","1.0.1","1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.1.6","1.1.7","1.1.8","1.1.9","1.1.10","1.1.11","1.1.12","1.1.13","1.1.14","2.0.0","2.0.1","2.0.2","2.0.3","2.1.0","3.0.0","3.0.1","3.0.2","4.0.0","4.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6"],"vulnerableVersions":["5.0.2","5.0.3","5.0.4","5.0.5"],"cwe":["CWE-400"],"cvss":{"score":6.5,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},"range":">=5.0.0 <5.0.6","id":"C4KPZP2ckDqb4nC9t16WqRz9gHVKgEUhKQOmesTnPGidD2+QM0FrxEBjx9oxcYytMJadXz72VYYla89np90+Bg=="}