StackRadar

CVE-2026-102276

High

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
26th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,091
of 17,957 indexed, latest versions
Container images
1,126
deployed by those charts
Fix available
1 of 2
affected packages

brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion

Carried by container images the latest versions of 1,091 of 17,957 indexed charts deploy, on 1,126 images.

Affected packageAffected versionsFixed inImages
brace-expansionnpm1.1.1, 1.1.2, 1.1.4, 1.1.6+23 more1.1.19, 2.1.5, 5.0.101,126
node-brace-expansiondeb1.1.8-1, 1.1.11-1, 2.0.1+~1.1.0-1no fix listed6
OSV records
GHSA-6j4f-fj2g-mc7pUBUNTU-CVE-2026-102276
Trending
Rank 15 in indexed charts, since 30 Sept 2026. See the ranking →

Charts affected

1,091 by stars
ChartLatestAffected imagesRadar Score
umamiwaldo-visionVerified publisher0.0.11 of 1See more

umami waldo-vision 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:postgresql-v1.39.560fa8875aff8
brace-expansion@2.0.1
2.1.5

Open the chart page →

1,312
lighthouse-cicowboysysopVerified publisher9.0.01 of 1See more

lighthouse-ci cowboysysop 9.0.0

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
patrickhulce/lhci-server:0.8.174b4b6a3954d
brace-expansion@1.1.11
1.1.19

Open the chart page →

2,282
uptime-kumaduyet0.1.81 of 1See more

uptime-kuma duyet 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
brace-expansion@2.0.1
2.1.5

Open the chart page →

4,708
docmosthelmforgeVerified publisher1.4.01 of 4See more

docmost helmforge 1.4.0

1 of the 4 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
docmost/docmost:0.96.0b56947fcfd08
brace-expansion@5.0.9
5.0.10

Open the chart page →

3,937
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
brace-expansion@2.0.1
2.1.5

Open the chart page →

2,992
etherpadnicholaswildeVerified publisher1.0.21 of 1See more

etherpad nicholaswilde 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
ghcr.io/nicholaswilde/etherpad:version-1.8.1426bbd45110d5
brace-expansion@1.1.11
1.1.19

Open the chart page →

4,233
redisinsightredisinsight-guiVerified publisher1.3.51 of 1See more

redisinsight redisinsight-gui 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
redis/redisinsight:3.8b5e19ee240ab
brace-expansion@2.0.2
2.1.5

Open the chart page →

1,223
redisinsight-secureredisinsight-secureVerified publisher1.0.21 of 1See more

redisinsight-secure redisinsight-secure 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
redis/redisinsight:2.68019fcf774631
brace-expansion@2.0.1
2.1.5

Open the chart page →

1,915
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:latest4f8c0f8a8ee0
brace-expansion@2.1.4
2.1.5

Open the chart page →

1,112
servarrservarr1.0.21 of 10See more

servarr servarr 1.0.2

1 of the 10 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
brace-expansion@1.1.11
1.1.19

Open the chart page →

14,384
snyk-monitorsnyk2.23.261 of 2See more

snyk-monitor snyk 2.23.26

1 of the 2 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
brace-expansion@5.0.9
5.0.10

Open the chart page →

704
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.11.10c58e7b47bb6
brace-expansion@1.1.11
1.1.19

Open the chart page →

6,599
abcdesktopabcdesktopOfficialVerified publisher4.4.131 of 9See more

abcdesktop abcdesktop 4.4.13

1 of the 9 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
ghcr.io/abcdesktopio/oc.nginx:4.4.14aec9ad6aa65
brace-expansion@5.0.9
5.0.10

Open the chart page →

970
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
brace-expansion@1.1.11
1.1.19

Open the chart page →

5,489
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
baserow/web-frontend:2.3.3566d24c7d9f5
brace-expansion@5.0.7
5.0.10

Open the chart page →

18,749
carbonetes-analyzercarbonetes-analyzerVerified publisher1.0.61 of 1See more

carbonetes-analyzer carbonetes-analyzer 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
carbonetes/carbonetes-analyzer:1.0.31b9b93c9a37f
brace-expansion@1.1.11
1.1.19

Open the chart page →

1,885
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
brace-expansion@1.1.11
1.1.19

Open the chart page →

137,043
kuttchristianhuthVerified publisher9.11.21 of 3See more

kutt christianhuth 9.11.2

1 of the 3 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
kutt/kutt:v3.2.6fa3d24a89b04
brace-expansion@2.0.2
2.1.5

Open the chart page →

614
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
brace-expansion@1.1.11
1.1.19

Open the chart page →

8,632
dialdialOfficialVerified publisher8.0.01 of 4See more

dial dial 8.0.0

1 of the 4 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
epam/ai-dial-chat:1.1.0974c1ddceab6
brace-expansion@2.1.4
2.1.5

Open the chart page →

2,203
foundry-vttfoundry-vttVerified publisher12.343.01 of 1See more

foundry-vtt foundry-vtt 12.343.0

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
felddy/foundryvtt:12.343.06c5e3e9ffbb0
brace-expansion@2.0.1
2.1.5

Open the chart page →

811
wikijsgeek-cookbookVerified publisher6.4.21 of 1See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
brace-expansion@1.1.11
1.1.19

Open the chart page →

6,156
graphql-gatewaygraphql-gatewayVerified publisher0.1.51 of 1See more

graphql-gateway graphql-gateway 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
hansehe/graphql-gateway:1.0.458e09540afbc
brace-expansion@2.0.1
2.1.5

Open the chart page →

1,704
heimdallheimdallOfficialVerified publisher3.3.31 of 2See more

heimdall heimdall 3.3.3

1 of the 2 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
mitre/heimdall2:release-latest06f6e72d416a
brace-expansion@2.1.4
2.1.5

Open the chart page →

2,154
karakeephelmforgeVerified publisher1.2.92 of 3See more

karakeep helmforge 1.2.9

2 of the 3 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
brace-expansion@5.0.7
5.0.10
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
brace-expansion@2.0.1
2.1.5

Open the chart page →

10,952
openhabhelmforgeVerified publisher1.2.01 of 1See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
openhab/openhab:5.2.1bfd4a60e90da
brace-expansion@2.0.1
2.1.5

Open the chart page →

4,196
openctihelm-openctiVerified publisher3.0.131 of 8See more

opencti helm-opencti 3.0.13

1 of the 8 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
opencti/platform:7.260928.1d40cdb191cd0
brace-expansion@2.0.2
2.1.5

Open the chart page →

3,397
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
kyleslugg/klusterview:latestba8c36dfdfbd
brace-expansion@1.1.11
1.1.19

Open the chart page →

3,844
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
kubeflownotebookswg/centraldashboard:v1.6.137300551dea6
brace-expansion@1.1.11
1.1.19

Open the chart page →

166,582
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:2.10.0485a0019e5d6
brace-expansion@1.1.11
1.1.19

Open the chart page →

11,206
librechatlibrechat1.8.101 of 3See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
brace-expansion@2.0.1
2.1.5

Open the chart page →

3,061
libredb-studiolibredb-studioVerified publisher0.1.721 of 1See more

libredb-studio libredb-studio 0.1.72

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:0.17.0ce4d58724e25
brace-expansion@5.0.9
5.0.10

Open the chart page →

1,172
musicocielmusicocielVerified publisher0.0.01 of 3See more

musicociel musicociel 0.0.0

1 of the 3 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
davdiv/musicociel:deva85f99be882c
brace-expansion@2.0.1
2.1.5

Open the chart page →

4,641
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
ghcr.io/tale/headplane:0.5.50dbc52cffc19
brace-expansion@2.0.1
2.1.5

Open the chart page →

8,661
open5gsopen5gsVerified publisher2.3.51 of 5See more

open5gs open5gs 2.3.5

1 of the 5 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
brace-expansion@1.1.11
1.1.19

Open the chart page →

9,492
taigarc-helm-charts0.1.01 of 7See more

taiga rc-helm-charts 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
taigaio/taiga-events:6.4.00bf2d24a57d9
brace-expansion@1.1.11
1.1.19

Open the chart page →

7,436
wg-easywg-easyVerified publisher0.1.61 of 1See more

wg-easy wg-easy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:150e7bc9d34e86
brace-expansion@5.0.6
5.0.10

Open the chart page →

848
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
brace-expansion@1.1.11
1.1.19

Open the chart page →

10,257
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
brace-expansion@1.1.11
1.1.19

Open the chart page →

8,571
ghostcloudpirates-ghostVerified publisher0.20.261 of 3See more

ghost cloudpirates-ghost 0.20.26

1 of the 3 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
library/ghost:6.64.0586821cfebac
brace-expansion@2.0.2
2.1.5

Open the chart page →

7,632
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
brace-expansion@1.1.11
1.1.19

Open the chart page →

7,779
community-solid-servercommunity-solid-server3.0.01 of 1See more

community-solid-server community-solid-server 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
solidproject/community-server:6.0.2ccc4acb7e9a1
brace-expansion@1.1.11
1.1.19

Open the chart page →

1,732
foremancontane-githubOfficialVerified publisher0.6.01 of 1See more

foreman contane-github 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
contane/foreman:0.5.2efb98bdcc4e9
brace-expansion@2.0.1
2.1.5

Open the chart page →

1,432
convertigoconvertigoOfficialVerified publisher8.4.51 of 5See more

convertigo convertigo 8.4.5

1 of the 5 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
brace-expansion@1.1.11
1.1.19

Open the chart page →

15,947
cosmocosmo-platformOfficialVerified publisher0.20.03 of 10See more

cosmo cosmo-platform 0.20.0

3 of the 10 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/cdn:0.14.1d86fcf169f15
brace-expansion@2.0.1
2.1.5
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
brace-expansion@2.0.1
2.1.5
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
brace-expansion@2.0.1
2.1.5

Open the chart page →

31,135
hubotdecayofmind1.0.21 of 3See more

hubot decayofmind 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
decayofmind/hubot:3.3.21e18e92fe694
brace-expansion@1.1.11
1.1.19

Open the chart page →

2,653
hoppscotchdeliveryheroVerified publisher0.3.21 of 1See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
brace-expansion@2.0.1
2.1.5

Open the chart page →

3,663
duplistatusduplistatusVerified publisher1.3.01 of 2See more

duplistatus duplistatus 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
wsjbr/duplistatus:1.5.0bede86cf183f
brace-expansion@5.0.7
5.0.10

Open the chart page →

961
nightscoutgabe565Verified publisher0.13.01 of 2See more

nightscout gabe565 0.13.0

1 of the 2 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
brace-expansion@1.1.11
1.1.19

Open the chart page →

2,640
rsshubgabe565Verified publisher0.8.01 of 3See more

rsshub gabe565 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-102276.

Container imageDigestPackageFixed in
diygod/rsshub:latest22845ada2f14
brace-expansion@5.0.7
5.0.10

Open the chart page →

1,739

Container images carrying it

1,126 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
diygod/rsshub:latest22845ada2f14
brace-expansion@5.0.7
5.0.10
1
diygod/rsshub:2025-11-097a6312cac0d5
brace-expansion@2.0.2
2.1.5
1
docmost/docmost:0.96.0b56947fcfd08
brace-expansion@5.0.9
5.0.10
1
documenso/documenso:v1.8.17f16a9449f18
brace-expansion@2.0.1
2.1.5
1
drumsergio/genieacs:1.2.16.6ffbf8bd1340d
brace-expansion@5.0.6
5.0.10
1
drumsergio/lynxprompt:2.0.75c6afb6679301
brace-expansion@5.0.6
5.0.10
1
drumsergio/pumperly:1.4.885bbc3915e9e
brace-expansion@2.0.2
2.1.5
1
dserio83/velero-ui:0.3.1b4e1ec6664d3
brace-expansion@2.0.1
2.1.5
1
ducktors/turborepo-remote-cache:latest8aa1c158d885
brace-expansion@5.0.5
5.0.10
1
ealen/echo-server:0.6.0359761caae37
brace-expansion@1.1.11
1.1.19
1
eameti/node-app:latestf36642affa86
brace-expansion@1.1.11
1.1.19
1
eclipseaerios/benchmarking-tool:1.0.0a4b4c2e7fe62
brace-expansion@5.0.6
5.0.10
1
eclipseaerios/self-orchestrator:1.2.08b123bec5679
brace-expansion@2.0.1
2.1.5
1
electerious/ackee:3.2.05e7173fa321c
brace-expansion@1.1.11
1.1.19
1
enketo/enketo-express:3.0.4dcad9c2273f6
brace-expansion@1.1.11
1.1.19
1
epam/ai-dial-admin-frontend:0.21.01ecee9f1aa09
brace-expansion@5.0.7
5.0.10
1
epam/ai-dial-chat:1.1.0974c1ddceab6
brace-expansion@2.1.4
2.1.5
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
brace-expansion@1.1.8
1.1.19
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
brace-expansion@1.1.11
1.1.19
1
ethersphere/bzz-token-service:latest7624f11a72ad
brace-expansion@1.1.11
1.1.19
1
ethersphere/etherproxy:1.0.056029b0985f4
brace-expansion@1.1.11
1.1.19
1
ethersphere/multichain-proxy:0.0.261f5419afbcd
brace-expansion@2.0.1
2.1.5
1
ethersphere/onboarding-faucet:0.3.0513154aab230
brace-expansion@2.0.1
2.1.5
1
ethpandaops/assertoor:latest1efa2fba6711
brace-expansion@5.0.6
5.0.10
1
ethpandaops/blobscan:latest7a9ab6370657
brace-expansion@1.1.11
1.1.19
1
ethpandaops/blobscan-indexer:latestc58eb9ffe446
brace-expansion@1.1.11
1.1.19
1
ethpandaops/ethereumjs:masterfb84b718500f
brace-expansion@2.0.1
2.1.5
1
evershop/evershop:latestd0823576f91b
brace-expansion@2.0.1
2.1.5
1
evoapicloud/evolution-api:latest966625532d90
brace-expansion@5.0.4
5.0.10
1
factly/mande-web:0.34.1742355964b0e
brace-expansion@2.0.1
2.1.5
1
fallenbagel/jellyseerr:latest4538137bc5af
brace-expansion@2.0.2
2.1.5
1
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
brace-expansion@1.1.11
1.1.19
1
fallenbagel/jellyseerr:2.2.3a324fa4d81cc
brace-expansion@1.1.11
1.1.19
1
fanzynoodle/smeejas:0.0.15f9916c1a287
brace-expansion@1.1.11
1.1.19
1
felddy/foundryvtt:0.8.36c5d90b90349
brace-expansion@1.1.11
1.1.19
1
felddy/foundryvtt:12.343.06c5e3e9ffbb0
brace-expansion@2.0.1
2.1.5
1
felipecs8/app-movies-series:v14e51693fcdf5
brace-expansion@1.1.11
1.1.19
1
felipecs8/conversor-temperatura:v1f945423be36d
brace-expansion@2.0.1
2.1.5
1
felipecs8/landing-page:v1db6d44e325a1
brace-expansion@2.0.2
2.1.5
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
brace-expansion@2.0.1
2.1.5
1
fiware/idm:8.3.3a1b6ed4ae84f
brace-expansion@1.1.11
1.1.19
1
fiware/iotagent-json:3.1.0879b21a0d36d
brace-expansion@1.1.11
1.1.19
1
fiware/iotagent-ul:1.14.0fe11f55a926d
brace-expansion@1.1.11
1.1.19
1
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
brace-expansion@1.1.11
1.1.19
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
brace-expansion@2.0.1
2.1.5
1
flanksource/incident-manager-ui:v1.4.320d952c2a774a2
brace-expansion@2.0.1
2.1.5
1
foggbh/stocky:latest8b7a2e5ecf4e
brace-expansion@5.0.7
5.0.10
1
folioci/mod-graphql:latestf0655a6a08fd
brace-expansion@2.0.1
2.1.5
1
fonoster/routr-pgdata-migrations:2.13.6c7b1dba81eb3
brace-expansion@2.0.1
2.1.5
1
fosrl/pangolin:latest00cfb631097a
brace-expansion@5.0.6
5.0.10
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.