CVE:CVE-2022-3517
CNNVD:CNNVD-202210-1161
minimatch是isaacs个人开发者的一个 javascript 中的全局匹配器。
minimatch存在安全漏洞，该漏洞源于当使用特定参数调用braceExpand函数时，出现正则表达式拒绝服务(ReDoS)，从而导致拒绝服务。
solution:Upgrade minimatch_project minimatch to a higher version than 3.0.5,and avoid the version (,3.0.5); Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade fedoraproject fedora to a higher version than 36,37,and avoid the version 36,37