VendorsJon Schlinkertpicomatchany version
Vulnerabilities

Jon Schlinkert picomatch any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2026-33671
Picomatch has a ReDoS vulnerability via extglob quantifiers
Published 2026-03-26 · Analyzed
7.5EPSS 0.005
CVE-2026-33672
Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching
Published 2026-03-26 · Analyzed
5.3EPSS 0.005