Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
minimatch may match unintended files
published 2 months ago
Summary
The minimatch library used for pattern matching can be manipulated to match files it shouldn't, potentially exposing data or allowing unwanted actions. Update the library to the latest patched version (0.0.4‑tuxcare.3) to stop this behavior. If you use minimatch in your applications, apply the update as soon as possible.
What to do
- Update isaacs minimatch to version 0.0.4-tuxcare.3.
- Update minimatch to version 0.0.4-tuxcare.3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | isaacs | minimatch |
< 0.0.4-tuxcare.3 Fix: upgrade to 0.0.4-tuxcare.3
|
| TuxCare:npm | – | minimatch |
< 0.0.4-tuxcare.3 Fix: upgrade to 0.0.4-tuxcare.3
|
Original advisory text
TuxCare security update for minimatch (3 CVEs)
TuxCare rebuilt minimatch to address 3 CVEs. Fixed in 0.0.4-tuxcare.3.
Timeline
Published18 Aug 2026
Updated23 Sep 2026
First seen18 Aug 2026
Sources
CLSA-2026-1787072761 · OSV
Track software like this
Free during beta