unstale

npm / minimatch

minimatch

What changed in minimatch 10, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-27.

3 security

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli 0.2.8 on npm

minimatch 103 changes

Security 3

  • minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments

    3.1.3 … 10.2.3security advisory

  • minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions

    3.1.4 … 10.2.3security advisory

  • minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern

    3.1.3 … 10.2.1security advisory