| Release | Version | 
|---|---|
| bullseye | 2.0.0-1 | 
| bookworm | 2.0.1-2 | 
| trixie | 2.0.1+~1.1.0-2 | 
| forky | 2.0.1+~1.1.0-2 | 
| sid | 2.0.1+~1.1.0-2 | 
| Bug | bullseye | bookworm | trixie | forky | sid | Description | 
|---|---|---|---|---|---|---|
| CVE-2025-5889 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | fixed | A vulnerability was found in juliangruber brace-expansion up to 1.1.11 ... | 
| Bug | Description | 
|---|---|
| CVE-2017-18077 | index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expr ... |