[Bug 1224301] VUL-0: CVE-2024-4068: element-desktop,element-web: the npm package `braces` fails to limit the number of characters it can handle, which could lead to Memory Exhaustion

https://bugzilla.suse.com/show_bug.cgi?id=1224301 https://bugzilla.suse.com/show_bug.cgi?id=1224301#c1 Gabriele Sonnu <gabriele.sonnu@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1224256 --- Comment #1 from Gabriele Sonnu <gabriele.sonnu@suse.com> --- A vulnerable version (3.0.2) of the braces package is embedded in: - openSUSE:Factory/element-web - openSUSE:Factory/element-desktop Upstream issue: https://github.com/micromatch/braces/issues/35 -- You are receiving this mail because: You are on the CC list for the bug.