Bnbdr

**Name of the Vulnerable Software and Affected Versions** brace-expansion versions prior to 5.0.8 **Description** An issue exists that allows a denial of service via memory exhaustion. The `expand()` function limits the number of results using a `max` option, but it does not restrict the length of each individual result string. An attacker can chain multiple brace groups to keep the total result count below the limit while increasing the length of each result, causing memory usage to scale until the process encounters a fatal out-of-memory error. This can affect any application passing attacker-influenced strings to `expand()`, whether directly or transitively through minimatch or glob brace patterns. **Recommendations** Update to version 5.0.8.

**Name of the Vulnerable Software and Affected Versions** brace-expansion versions prior to 5.0.7 **Description** A denial of service issue exists where the `expand()` function exhibits exponential-time complexity when processing consecutive non-expanding '{}' brace groups. An attacker can provide a crafted string to the `expand()` function, either directly or transitively, leading to excessive CPU consumption and blocking of the event loop. The `max` option is ineffective in this scenario because it limits the size of the output rather than the amount of recursion work performed. **Recommendations** Update brace-expansion to version 5.0.7 or later.

**Name of the Vulnerable Software and Affected Versions** tar-fs versions 0.0.0 through 1.16.3 tar-fs versions 2.0.0 through 2.1.1 tar-fs versions 3.0.0 through 3.0.7 **Description** This issue is related to an Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"). The vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intended extraction directory. The issue is associated with index.js in the tar-fs package. **Recommendations** For tar-fs versions 0.0.0 through 1.16.3, update to version 1.16.4 or later. For tar-fs versions 2.0.0 through 2.1.1, update to version 2.1.2 or later. For tar-fs versions 3.0.0 through 3.0.7, update to version 3.0.8 or later. As a temporary workaround, consider disabling the extraction of tar files until a patch is available. Restrict access to the index.js file in the tar-fs package to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** radare2 versions prior to 2.9.0 **Description** A heap overflow issue exists in the `read module referenced functions` function in `libr/anal/flirt.c` due to a crafted flirt signature file. **Recommendations** For versions prior to 2.9.0, update to version 2.9.0 or later to resolve the issue.