Skip to content

Conversation

Copy link
Contributor

Copilot AI commented Feb 4, 2026

Context

Critical vulnerability (GHSA-7h2j-956f-4vf2) in transitive dependency @isaacs/brace-expansion@5.0.0 causing uncontrolled resource consumption. Updated to patched version 5.0.1 via npm audit fix.

Dependency chain: @storybook/react-vite@joshwooding/vite-plugin-react-docgen-typescriptglobminimatch@isaacs/brace-expansion

Related Jira ticket

N/A

Screenshots

N/A

Original prompt

This section details on the original issue you should resolve

<issue_title>fix: fix vulnerability regarding isaacs/brace-expansion 5.0.0</issue_title>
<issue_description>audit report

@isaacs/brace-expansion  5.0.0
Severity: critical
@isaacs/brace-expansion has Uncontrolled Resource Consumption - https://github.com/advisories/GHSA-7h2j-956f-4vf2
fix available via `npm audit fix`
node_modules/@isaacs/brace-expansion
```</issue_description>

## Comments on the Issue (you are @copilot in this section)

<comments>
</comments>


💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

Co-authored-by: timowestnosto <13622115+timowestnosto@users.noreply.github.com>
@timowestnosto timowestnosto marked this pull request as ready for review February 4, 2026 07:17
Copilot AI review requested due to automatic review settings February 4, 2026 07:17
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.

Copilot AI changed the title [WIP] Fix vulnerability regarding isaacs/brace-expansion 5.0.0 fix: resolve critical vulnerability in @isaacs/brace-expansion Feb 4, 2026
Copilot AI requested a review from timowestnosto February 4, 2026 07:18
@timowestnosto timowestnosto merged commit 2f12f73 into main Feb 4, 2026
3 checks passed
@nosto-release-public
Copy link

🎉 This PR is included in version 10.18.9 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

fix: fix vulnerability regarding isaacs/brace-expansion 5.0.0

3 participants