| Release | Version |
|---|---|
| bookworm | 3.0.2+~3.0.1-1 |
| trixie | 3.0.3+~3.0.5-1 |
| forky | 3.0.3+~3.0.5-1 |
| sid | 3.0.3+~3.0.5-1 |
| Bug | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|
| CVE-2026-93687 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable | vulnerable | braces through 3.0.3 contains a stack overflow vulnerability in the re ... |
| CVE-2024-4068 | vulnerable (no DSA) | fixed | fixed | fixed | The NPM package `braces`, versions prior to 3.0.3, fails to limit the ... |
| Bug | Description |
|---|---|
| CVE-2018-1109 | A vulnerability was found in Braces versions 2.2.0 and above, prior to ... |