request #47637 brace-expansion: 5.0.5 -> 5.0.6

Infos

Artifact ID#47637

Submitted byThomas Gerbet (tgerbet)

Last Modified On2026-05-19 09:54

Submitted on2026-05-19 08:39

Rank49378

Details

Summary *

brace-expansion: 5.0.5 -> 5.0.6

Original Submission

Fixes CVE-2026-45149 / https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-jxxr-4gwj-5jf2

No impact on Tuleap, it is only used within dev/build tools or with trusted code, DoS is not concern.

https://github.com/juliangruber/brace-expansion/compare/v5.0.5...v5.0.6

CategoryDependencies

Reported in versionEmpty

PlatformEmpty

Is an Enhancement or an internal improvement?

[ ] enhancement
[ ] internal improvement

CC listEmpty

Stage

Assigned toThomas Gerbet (tgerbet)

StatusClosed

Close date2026-05-19

Attachments

AttachmentsEmpty

References

Cross references

Show items referenced by request #47637

Referenced by request #47637

Artifact

rel #47138 17.6

Other

gerrit #37770

Follow-ups

Joris MASSON (jmasson)

2026-05-19 09:54

Connected artifacts
- Added Fixed in: rel #47138

Tracker Workflow Manager (forge__tracker_workflow_manager)

2026-05-19 09:53

Closed by @tgerbet with git #tuleap/tuleap/ac183924a21026faaff82d52b511a3afc1ff6ee6.

Status changed from Under review to Closed
Close date set to 2026-05-19

Thomas Gerbet (tgerbet)

2026-05-19 08:58

See gerrit #37770

Status changed from Under implementation to Under review

Public

Referenced by request #47637

Artifact

Other

Follow-ups