[Bug 1224310] VUL-0: CVE-2024-4068: xpra-html5: the npm package `braces` fails to limit the number of characters it can handle, which could lead to Memory Exhaustion

https://bugzilla.suse.com/show_bug.cgi?id=1224310 https://bugzilla.suse.com/show_bug.cgi?id=1224310#c1 Gabriele Sonnu <gabriele.sonnu@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1224256 --- Comment #1 from Gabriele Sonnu <gabriele.sonnu@suse.com> --- A vulnerable version (3.0.2) of the braces package is embedded in: - openSUSE:Factory/xpra-html5 Upstream issue: https://github.com/micromatch/braces/issues/35 -- You are receiving this mail because: You are on the CC list for the bug.