Commit dbfae4f
UID2-6675: upgrade minimatch to fix CVE-2026-27903 ReDoS
Bumps minimatch overrides to patched versions:
- minimatch (root): ^10.2.1 -> ^10.2.3
- eslint-plugin-import/minimatch: 3.1.2 -> 3.1.3
- glob/minimatch: ^10.2.1 -> ^10.2.3
CVE-2026-27903 / GHSA-7r86-cg39-jmmj: ReDoS via multiple GLOBSTAR
segments in matchOne(), affects minimatch <3.1.3 and <10.2.3.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>1 parent 75af6d6 commit dbfae4f
2 files changed
+284
-21
lines changedSome generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
247 | 247 | | |
248 | 248 | | |
249 | 249 | | |
250 | | - | |
| 250 | + | |
251 | 251 | | |
252 | 252 | | |
253 | | - | |
| 253 | + | |
254 | 254 | | |
255 | | - | |
| 255 | + | |
256 | 256 | | |
257 | 257 | | |
258 | 258 | | |
| |||
0 commit comments