Jonschlinkert

    Dashboard / Vendors

    Products: 5
    Vulnerabilities: 8
    Known Exploited: 0
    0
    Critical Level Threats
    6
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-112366

    Picomatch through 4.0.7 ReDoS via single-branch repeated extglob patterns

    Last Modified: Oct 19, 2026
    Published: Oct 19, 2026

    CVE-2026-93687

    braces through 3.0.3 Stack Overflow via Deeply Nested Patterns

    Last Modified: Nov 05, 2026
    Published: Sep 18, 2026

    CVE-2026-33672

    Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching

    Last Modified: Apr 02, 2026
    Published: Mar 26, 2026

    CVE-2026-33671

    Picomatch has a ReDoS vulnerability via extglob quantifiers

    Last Modified: Apr 02, 2026
    Published: Mar 26, 2026

    CVE-2025-57328

    toggle-array is a package designed to enables a property on the object at the specified index, while disabling the property on all other objects. A Prototype Pollution vulnerability in the enable and disable function of toggle-array v1.0.1 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.

    Last Modified: Oct 20, 2025
    Published: Sep 24, 2025
    Items Per Page
    Jonschlinkert Vulnerabilities & Security CVEs | CVE-DB