Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
minimatch library can match files it shouldn't
published 3 months ago
Summary
The minimatch code library used in some applications could be fooled into matching unintended files, which might let an attacker read or modify data. This risk is fixed in the updated version 0.2.14‑tuxcare.1. Upgrade minimatch to that version as soon as possible.
What to do
- Update isaacs minimatch to version 0.2.14-tuxcare.1.
- Update minimatch to version 0.2.14-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | isaacs | minimatch |
>= 0.2.14-tuxcare.0, < 0.2.14-tuxcare.1 Fix: upgrade to 0.2.14-tuxcare.1
|
| TuxCare:npm | – | minimatch |
>= 0.2.14-tuxcare.0, < 0.2.14-tuxcare.1 Fix: upgrade to 0.2.14-tuxcare.1
|
Original advisory text
TuxCare security update for minimatch (1 CVE)
TuxCare rebuilt minimatch to address 1 CVE. Fixed in 0.2.14-tuxcare.1.
Timeline
Published4 Aug 2026
Updated22 Oct 2026
First seen15 Oct 2026
Sources
CLSA-2026-1773620219 · OSV
Track software like this
Free during beta