Skip to content

chore(security): override brace-expansion vulnerable ranges (GHSA-3jxr-9vmj-r5cp) (25_2) - #34433

Merged
Alyar666 merged 1 commit into
DevExpress:25_2from
Alyar666:chore/security-brace-expansion-25_2
Jul 23, 2026
Merged

chore(security): override brace-expansion vulnerable ranges (GHSA-3jxr-9vmj-r5cp) (25_2)#34433
Alyar666 merged 1 commit into
DevExpress:25_2from
Alyar666:chore/security-brace-expansion-25_2

Conversation

@Alyar666

@Alyar666 Alyar666 commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

No description provided.

…r-9vmj-r5cp) (25_2)

Port of DevExpress#34421 to 25_2. DoS via exponential-time expansion
(CVE-2026-13149). Resolved 5.0.6 -> 5.0.7 (1.1.16 already present).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@Alyar666
Alyar666 merged commit 4496eea into DevExpress:25_2 Jul 23, 2026
112 of 113 checks passed
alexslavr pushed a commit that referenced this pull request Jul 23, 2026
…r-9vmj-r5cp) (25_2) (#34433)

Co-authored-by: Alyar <>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants