[Security] picomatch — No CVE listed

[bitskc]

Vulnerability in picomatch

Severity: high
CVE: No CVE listed
Vulnerable range: 4.0.0 - 4.0.3
Advisory: GHSA-3v7f-55p6-f55p; GHSA-c2c7-rcm5-vvqj
Description: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching; Picomatch has a ReDoS vulnerability via extglob quantifiers

Fix recommendation

Run npm audit fix to resolve this vulnerability.

Affected paths

node_modules/picomatch

---

Automatically detected by dependency vulnerability scan.