PatchTheCVEbraces vulnerabilities and fixes
Recent CVEs affecting braces, with upgrade or downgrade steps. 2 tracked.
braces has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-05-14. Highest priority: CVE-2024-4068 (score 55/100).
- CVE-2024-4068 HIGH 7.5 UPGRADE The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, whic
- CVE-2018-1109 MEDIUM 5.3 UPGRADE A vulnerability was found in Braces versions 2.2.0 and above, prior to 2.3.1
FAQ
How do I fix braces vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is braces being exploited right now?
None of the tracked braces CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which braces CVE should I patch first?
CVE-2024-4068 currently ranks highest (55/100): The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, whic.