Commit

3a498df

thoughts on https://github.com/micromatch/braces/issues/85?

GitHubCVE - READ THIS FIRST · Issue #85 · micromatch/bracesgithub/advisory-database#10132 (comment) If you create another duplicate issue or pull request related to this, you will be blocked.

IntaeLall @IntaeLallOct 182/2

braces sees ~600M downloads/month and is deeply embedded in the Node.js ecosystem. The disputed DoS CVE is causing audit alerts and CI/CD blockers across downstream projects, while the maintainer considers it bogus and refuses patches. Even if severity is debatable, refusing a defensive fix leaves the wider ecosystem carrying the cost.

23:22 · Oct 18, 2026commit 3a498df