Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
juliangruber/brace-expansion update stops possible code injection
published 1 month ago
Summary
The brace‑expansion code library used in your applications had a weakness that could let an attacker run unwanted commands. The issue is fixed in version 4.0.1‑tuxcare.1. Apply this update to keep your systems safe.
What to do
- Update juliangruber brace-expansion to version 4.0.1-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | juliangruber | brace-expansion |
>= 4.0.1-tuxcare.0, < 4.0.1-tuxcare.1 Fix: upgrade to 4.0.1-tuxcare.1
|
Original advisory text
TuxCare security update for brace-expansion (1 CVE)
TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 4.0.1-tuxcare.1.
Timeline
Published30 Sep 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLSA-2026-1790807349 · OSV
Track software like this
Free during beta