CVE-2026-14257 severity vulnerability in brace-expansion@5.0.7 for npm@10.9.9,npm@11.9.0 npm@12.0.2 in Node.js  #9832

Activity

1. aliceshi-aaaaaokkk

   changed the title [-]test[/-] [+]CVE-2026-14257 severity vulnerability in tar@7.5.19 for npm@10.9.9,npm@11.9.0 npm@12.0.2 in Node.js [/+] on Aug 3, 2026
2. aliceshi-aaaaaokkk

   changed the title [-]CVE-2026-14257 severity vulnerability in tar@7.5.19 for npm@10.9.9,npm@11.9.0 npm@12.0.2 in Node.js [/-] [+]CVE-2026-14257 severity vulnerability in brace-expansion@5.0.7 for npm@10.9.9,npm@11.9.0 npm@12.0.2 in Node.js [/+] on Aug 3, 2026
3. v-kchindam-infy commented on Aug 3, 2026

   

   v-kchindam-infy

   on Aug 3, 2026

   More actions

   This appears to describe a vulnerability in the brace-expansion dependency rather than an npm cli bug. Dependency updates are done as part of each npm release. also npm is not vulnerable to to this cve's. Closing the issue
4. v-kchindam-infy

   closed this as completedon Aug 3, 2026