Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
juliangruber/brace-expansion may allow code execution
published 1 month ago
Summary
The brace-expansion library used in some applications could be manipulated to run unwanted code on the server. This could let an attacker take control of the affected system or steal data. Upgrade to version 5.0.9‑tuxcare.1 or later to fix the problem.
What to do
- Update juliangruber brace-expansion to version 5.0.9-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | juliangruber | brace-expansion |
< 5.0.9-tuxcare.1 Fix: upgrade to 5.0.9-tuxcare.1
|
Original advisory text
TuxCare security update for brace-expansion (1 CVE)
TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 5.0.9-tuxcare.1.
Timeline
Published5 Oct 2026
Updated5 Oct 2026
First seen5 Oct 2026
Sources
CLSA-2026-1791215851 · OSV
Track software like this
Free during beta