CVE-2017-16032 | Mend Vulnerability Database

Vulnerability DatabaseCVE-2017-16032

CVE-2017-16032

Published:May 19, 2026

Updated:May 20, 2026

brace-expansion before 1.1.7 are vulnerable to a regular expression denial of service.

Affected Packages

nodejs (CONDA):

Affected version(s) >=4.2.6 <8.8.1

Fix Suggestion:

Update to version 8.8.1

azure-cli (CONDA):

Affected version(s) =0.10.3

Fix Suggestion:

Update to version no_fix

jsdom (CONDA):

Affected version(s) =11.0.0 <11.11.0

Fix Suggestion:

Update to version 11.11.0

jquery (CONDA):

Affected version(s) =3.3.0 <3.4.0

Fix Suggestion:

Update to version 3.4.0

brace-expansion (NPM):

Affected version(s) >=0.0.0 <1.1.7

Fix Suggestion:

Update to version 1.1.7

ncapsulate.bower (NUGET):

Affected version(s) >=1.3.12 <=1.3.12.1

Fix Suggestion:

Update to version no_fix

nogit (NUGET):

Affected version(s) =0.1.0

Fix Suggestion:

Update to version no_fix

nodebin (NUGET):

Affected version(s) =5.2.0

Fix Suggestion:

Update to version no_fix

midiator.webclient (NUGET):

Affected version(s) >=1.0.98 <1.0.105

Fix Suggestion:

Update to version 1.0.105

karmanodemodules (NUGET):

Affected version(s) >=1.0.0 <=1.0.1

Fix Suggestion:

Update to version no_fix

raml.parser (NUGET):

Affected version(s) >=1.0.5 <2.0.0

Fix Suggestion:

Update to version 2.0.0

tslint (NUGET):

Affected version(s) >=2.4.5 <5.6.0

Fix Suggestion:

Update to version 5.6.0

nugotdemo (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

npm.js (NUGET):

Affected version(s) =2.13.1

Fix Suggestion:

Update to version no_fix

node-sass-bundle (NUGET):

Affected version(s) >=1.0.0 <=1.1.0

Fix Suggestion:

Update to version no_fix

tools.npm (NUGET):

Affected version(s) =4.0.3-beta1

Fix Suggestion:

Update to version no_fix

ncapsulate.node.shadow (NUGET):

Affected version(s) =5.3.0

Fix Suggestion:

Update to version no_fix

yarnpkg.yarn (NUGET):

Affected version(s) >=0.17.4 <0.26.1

Fix Suggestion:

Update to version 0.26.1

raml.parser (NUGET):

Affected version(s) >=1.0.0 <1.0.2

Fix Suggestion:

Update to version 1.0.2

ncapsulate.gulp (NUGET):

Affected version(s) >=3.8.10 <=3.8.10.1

Fix Suggestion:

Update to version no_fix

lesshint (NUGET):

Affected version(s) >=2.0.0 <=2.0.1

Fix Suggestion:

Update to version no_fix

nodejs.redist.x64 (NUGET):

Affected version(s) =7.7.3 <7.7.3.1

Fix Suggestion:

Update to version 7.7.3.1

angularjstypescriptbase (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

apiexplorer.helppage (NUGET):

Affected version(s) >=1.0.0-alpha1 <1.0.0-alpha3

Fix Suggestion:

Update to version 1.0.0-alpha3

npm3 (NUGET):

Affected version(s) =3.0.0-alpha0001

Fix Suggestion:

Update to version no_fix

fable.template.elmish.react (NUGET):

Affected version(s) =0.1.5 <0.1.6

Fix Suggestion:

Update to version 0.1.6

betclic.buildtools.node (NUGET):

Affected version(s) >=1.0.0 <=1.0.6

Fix Suggestion:

Update to version no_fix

z4a-dotnet-scaffold (NUGET):

Affected version(s) =1.0.0.1 <1.0.0.2

Fix Suggestion:

Update to version 1.0.0.2

nodejs.redist.x64 (NUGET):

Affected version(s) >=7.7.4 <8.0.0

Fix Suggestion:

Update to version 8.0.0

yarn.msbuild (NUGET):

Affected version(s) =0.21.3 <0.22.0

Fix Suggestion:

Update to version 0.22.0

ncapsulate.node (NUGET):

Affected version(s) >=0.10.35 <=0.10.35.1

Fix Suggestion:

Update to version no_fix

entityframework.lookuptables (NUGET):

Affected version(s) >=1.1.12.119 <1.1.14.119

Fix Suggestion:

Update to version 1.1.14.119

npm (NUGET):

Affected version(s) >=2.14.14 <=3.5.2

Fix Suggestion:

Update to version no_fix

contentasaurus/c-rex-admin (PHP):

Affected version(s) =v1.0.0 <v1.0.1

Fix Suggestion:

Update to version v1.0.1

ristorantino/aditions (PHP):

Affected version(s) =dev-master <dev-master-ko-js-update

Fix Suggestion:

Update to version dev-master-ko-js-update

ymcatwincities/openy-cibox-vm (PHP):

Affected version(s) =dev-snyk-upgrade-c10ea3c8666b5b22429d3e747ff879aa <dev-snyk-fix-5c35a6fcce9a99be5f2075759c8a3425

Fix Suggestion:

Update to version dev-snyk-fix-5c35a6fcce9a99be5f2075759c8a3425

binh/mentions (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

ryanvade/flarum-ext-login-redirect (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

dreamfactory/df-api-docs-ui (PHP):

Affected version(s) >=1.0.0 <1.1.0

Fix Suggestion:

Update to version 1.1.0

chrisbraybrooke/laravel-ecommerce (PHP):

Affected version(s) =dev-dev <dev-form-field-key

Fix Suggestion:

Update to version dev-form-field-key

bibcnrs/wp-ebsco-widget (PHP):

Affected version(s) >=0.2.2 <0.3.0

Fix Suggestion:

Update to version 0.3.0

datitisev/flarum-ext-moderator-notes (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

mpcmf/mpcmf-web-app (PHP):

Affected version(s) =dev-php7

Fix Suggestion:

Update to version no_fix

contentasaurus/c-rex-admin (PHP):

Affected version(s) >=v1.0.2 <v1.0.7

Fix Suggestion:

Update to version v1.0.7

mpcmf/mpcmf-web-app (PHP):

Affected version(s) =dev-master <1.0.0.x-dev

Fix Suggestion:

Update to version 1.0.0.x-dev

z3/t3build-node (PHP):

Affected version(s) =dev-master <1.0.11

Fix Suggestion:

Update to version 1.0.11

oburatongoi/productivity (PHP):

Affected version(s) >=0.0.9 <0.0.13

Fix Suggestion:

Update to version 0.0.13

ymcatwincities/openy-cibox-vm (PHP):

Affected version(s) >=dev-snyk-fix-19013f5e293df9c71f68bf9631fba9f2 <dev-snyk-fix-45a393004964497d68443389076d755a

Fix Suggestion:

Update to version dev-snyk-fix-45a393004964497d68443389076d755a

ymcatwincities/openy-cibox-vm (PHP):

Affected version(s) =dev-master <dev-snyk-fix-d3e304fdb18d8e743e047d064f2eeebe

Fix Suggestion:

Update to version dev-snyk-fix-d3e304fdb18d8e743e047d064f2eeebe

spiral/toolkit (PHP):

Affected version(s) =v0.8.19 <v0.8.20

Fix Suggestion:

Update to version v0.8.20

chrisbraybrooke/laravel-ecommerce (PHP):

Affected version(s) >=0.0.18 <0.0.56

Fix Suggestion:

Update to version 0.0.56

spiral/toolkit (PHP):

Affected version(s) >=v0.8.14 <v0.8.18

Fix Suggestion:

Update to version v0.8.18

abedinia/heisenberg (PHP):

Affected version(s) =dev-master <0.0.1

Fix Suggestion:

Update to version 0.0.1

chrisbraybrooke/laravel-ecommerce (PHP):

Affected version(s) =0.0.4 <0.0.11

Fix Suggestion:

Update to version 0.0.11

ilhanet/erpnet-widget-resource (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

iget-master/material-admin (PHP):

Affected version(s) =dev-issue-18 <dev-L51

Fix Suggestion:

Update to version dev-L51

spiral/toolkit (PHP):

Affected version(s) >=v0.8.24 <v0.9.0

Fix Suggestion:

Update to version v0.9.0

yuan1994/wechat_web_devtools (PHP):

Affected version(s) >=dev-core <0.15.152901-core

Fix Suggestion:

Update to version 0.15.152901-core

lufangyu1217/demo (PHP):

Affected version(s) =dev-bugfix/we-hate-exam <dev-develop

Fix Suggestion:

Update to version dev-develop

hydrawiki/lessoid (PHP):

Affected version(s) =1.0.0 <2.0.0

Fix Suggestion:

Update to version 2.0.0

kayrules/solatjakim-api-site (PHP):

Affected version(s) =dev-master <dev-version-1.0

Fix Suggestion:

Update to version dev-version-1.0

urre/postpone (PHP):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

oburatongoi/productivity (PHP):

Affected version(s) >=0.1.0 <0.3.36

Fix Suggestion:

Update to version 0.3.36

humanmade/coding-standards (PHP):

Affected version(s) >=0.1.0 <dev-dependabot/npm_and_yarn/json-schema-0.4.0

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/json-schema-0.4.0

neon-sys (RUST):

Affected version(s) =0.1.10 <0.1.11

Fix Suggestion:

Update to version 0.1.11

Related Resources (1)

https://github.com/juliangruber/brace-expansion/pull/35/commits/b13381281cead487cbdbfd6a69fb097ea5e456c3

Do you need more information?

CVSS v4

Base Score:

4.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Attack Requirements

NONE

Privileges Required

LOW

User Interaction

PASSIVE

Vulnerable System Confidentiality

LOW

Vulnerable System Integrity

LOW

Vulnerable System Availability

HIGH

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

5.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

HIGH