Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-08-03T16:33:36 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CWE-770

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop. The fix for CVE-2026-14257 is bypassed by the vulnerability. This issue is fixed in versions 1.1.18, 2.1.4, 3.0.6, and 5.0.9.

A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.

Any applications that pass user-controlled input to the `expand()` function are vulnerable to this issue. This flaw can result in an excessive consumption of memory that eventually terminates the process or blocks the event loop, both causing a denial of service. As this vulnerability allows a remote attacker to cause a denial of service, it has been rated with an important severity. To mitigate this vulnerability, do not pass untrusted input to the expand() function. Red Hat Enterprise Linux 10 2026-08-10T00:00:00Z RHSA-2026:52841 nodejs-nodemon-0:3.1.14-3.el10_2 Red Hat Enterprise Linux 10 2026-08-17T00:00:00Z RHSA-2026:55541 nodejs22-1:22.23.1-6.el10_2 Red Hat Discovery 2 2026-08-13T00:00:00Z RHSA-2026:54760 discovery/discovery-ui-rhel9:1786634825 Red Hat Hardened Images 2026-08-04T00:00:00Z RHSA-2026:50079 grafana13-1-main-13.1.1-0.5.1.hum1 Red Hat Hardened Images 2026-08-04T00:00:00Z RHSA-2026:50290 grafana12-4-main-12.4.6-0.4.hum1 Red Hat Hardened Images 2026-08-05T00:00:00Z RHSA-2026:50826 grafana13-1-main-13.1.1-0.5.2.hum1 Red Hat Hardened Images 2026-08-12T00:00:00Z RHSA-2026:54183 nodejs24-main-24.18.1-0.2.1.hum1 Red Hat Hardened Images 2026-08-12T00:00:00Z RHSA-2026:54389 nodejs26-main-26.7.0-1.5.2.hum1 Red Hat Hardened Images 2026-08-12T00:00:00Z RHSA-2026:54436 nodejs22-main-22.23.2-2.3.2.hum1 Cryostat 4 Not affected brace-expansion Cryostat 4 Not affected cryostat-openshift-console-plugin-npm Cryostat 4 Affected grafana-infinity-datasource-npm Exploit Intelligence Affected exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 Gatekeeper 3 Not affected gatekeeper/gatekeeper-rhel9 Migration Toolkit for Applications 8 Affected mta/mta-cli-rhel9 Migration Toolkit for Applications 8 Affected mta/mta-generic-external-provider-rhel9 Migration Toolkit for Applications 8 Not affected mta/mta-ui-rhel8 Migration Toolkit for Applications 8 Affected mta/mta-ui-rhel9 Migration Toolkit for Containers Affected rhmtc/openshift-migration-ui-rhel8 Node HealthCheck Operator Affected workload-availability/node-healthcheck-must-gather-rhel9 Node HealthCheck Operator Affected workload-availability/node-healthcheck-operator-bundle Node HealthCheck Operator Affected workload-availability/node-healthcheck-rhel9-operator Node HealthCheck Operator Affected workload-availability/node-remediation-console-rhel8 OpenShift Lightspeed Affected openshift-lightspeed/lightspeed-agentic-console-rhel9 OpenShift Lightspeed Affected openshift-lightspeed/lightspeed-console-plugin-419-rhel9 OpenShift Lightspeed Affected openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9 OpenShift Lightspeed Affected openshift-lightspeed/lightspeed-console-plugin-rhel9 OpenShift Pipelines Affected openshift-pipelines/pipelines-console-plugin-pf5-rhel9 OpenShift Pipelines Affected openshift-pipelines/pipelines-console-plugin-rhel8 OpenShift Pipelines Affected openshift-pipelines/pipelines-console-plugin-rhel9 OpenShift Pipelines Affected openshift-pipelines/pipelines-hub-ui-rhel8 OpenShift Pipelines Affected openshift-pipelines/pipelines-hub-ui-rhel9 OpenShift Service Mesh 3 Not affected openshift-service-mesh/kiali-operator-bundle OpenShift Service Mesh 3 Affected openshift-service-mesh/kiali-ossmc-rhel9 OpenShift Service Mesh 3 Affected openshift-service-mesh/kiali-rhel9 OpenShift Service Mesh 3 Not affected openshift-service-mesh/kiali-rhel9-operator Red Hat 3scale API Management Platform 2 Not affected 3scale-amp21/system Red Hat 3scale API Management Platform 2 Not affected 3scale-amp22/system Red Hat 3scale API Management Platform 2 Not affected 3scale-amp2/system-rhel7 Red Hat 3scale API Management Platform 2 Not affected 3scale-amp2/system-rhel8 Red Hat 3scale API Management Platform 2 Not affected 3scale-amp2/system-rhel9 Red Hat Advanced Cluster Management for Kubernetes 2 Will not fix rhacm2/volsync-operator-bundle Red Hat Advanced Cluster Management for Kubernetes 2 Will not fix rhacm2/volsync-rhel9 Red Hat Advanced Cluster Security 4 Affected advanced-cluster-security/rhacs-main-rhel8 Red Hat Advanced Cluster Security 4 Affected advanced-cluster-security/rhacs-main-rhel9 Red Hat AMQ Broker 7 Affected amq-broker-bin.zip Red Hat AMQ Broker 7 Affected amq-broker-maven-repository.zip Red Hat AMQ Broker 7 Affected brace-expansion Red Hat Ansible Automation Platform 2 Will not fix ansible-automation-platform-24/lightspeed-rhel8 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-25/lightspeed-rhel8 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-26/gateway-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-26/lightspeed-rhel9 Red Hat Ansible Automation Platform 2 Affected ansible-automation-platform-27/gateway-rhel9 Red Hat Ansible Automation Platform 2 Affected automation-eda-controller Red Hat Ansible Automation Platform 2 Affected automation-gateway Red Hat Ansible Automation Platform 2 Affected automation-platform-ui Red Hat build of Apache Camel for Spring Boot 4 Not affected brace-expansion Red Hat build of Apache Camel for Spring Boot 4 Affected rhaf-camel-for-springboot-maven-repository.zip Red Hat build of Apache Camel for Spring Boot 4 Affected rhaf-camel-maven-repository.zip Red Hat build of Apache Camel for Spring Boot 4 Affected rhaf-camel-spring-boot-maven-repository.zip Red Hat build of Apache Camel - HawtIO 4 Affected brace-expansion Red Hat build of Apicurio Registry 3 Affected apicurio/apicurio-registry-ui-rhel8 Red Hat build of Apicurio Registry 3 Affected apicurio/apicurio-registry-ui-rhel9 Red Hat Build of Keycloak Affected brace-expansion Red Hat Build of Keycloak Affected rhbk-quarkus-dist.zip Red Hat Build of Podman Desktop Affected rh-podman-desktop.git Red Hat Connectivity Link 1 Affected rhcl-1/rhcl-console-plugin-rhel9 Red Hat Data Grid 8 Affected brace-expansion Red Hat Data Grid 8 Affected redhat-datagrid-maven-repository.zip Red Hat Developer Hub Affected rhdh/red-hat-developer-hub-backstage-plugin-lightspeed Red Hat Developer Hub Affected rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend Red Hat Developer Hub Affected rhdh/red-hat-developer-hub-backstage-plugin-orchestrator Red Hat Developer Hub Affected rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend Red Hat Developer Hub Affected rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki Red Hat Developer Hub Affected rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets Red Hat Developer Hub Affected rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator Red Hat Developer Hub Affected rhdh/rhdh-hub-rhel9 Red Hat Directory Server 11 Affected redhat-ds:11/389-ds-base Red Hat Directory Server 12 Affected redhat-ds:12/389-ds-base Red Hat Directory Server 13 Affected 389-ds-base Red Hat Edge Manager 1 Affected rhem/flightctl-ui-ocp-rhel10 Red Hat Edge Manager 1 Affected rhem/flightctl-ui-ocp-rhel9 Red Hat Edge Manager 1 Affected rhem/flightctl-ui-rhel10 Red Hat Edge Manager 1 Affected rhem/flightctl-ui-rhel9 Red Hat Enterprise Linux 10 Affected nodejs24 Red Hat Enterprise Linux 10 Not affected rust Red Hat Enterprise Linux 7 Affected subscription-manager Red Hat Enterprise Linux 8 Not affected grafana Red Hat Enterprise Linux 8 Not affected mozjs60 Red Hat Enterprise Linux 8 Affected nodejs:22/nodejs Red Hat Enterprise Linux 8 Affected nodejs:22/nodejs-nodemon Red Hat Enterprise Linux 8 Affected nodejs:24/nodejs Red Hat Enterprise Linux 8 Affected nodejs:24/nodejs-nodemon Red Hat Enterprise Linux 8 Affected pcs Red Hat Enterprise Linux 9 Not affected gjs Red Hat Enterprise Linux 9 Affected nodejs:22/nodejs Red Hat Enterprise Linux 9 Affected nodejs:22/nodejs-nodemon Red Hat Enterprise Linux 9 Affected nodejs:24/nodejs Red Hat Enterprise Linux 9 Affected nodejs:24/nodejs-nodemon Red Hat Enterprise Linux 9 Affected pcs Red Hat Enterprise Linux 9 Not affected rust Red Hat Enterprise Linux AI (RHEL AI) 3 Affected rhelai3/bootc-cuda-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Affected rhelai3/bootc-gaudi-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Affected rhelai3/bootc-rocm-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Affected rhelai3/disk-image-cuda-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Affected rust Red Hat Hardened Images Not affected dotnet8.0 Red Hat Hardened Images Not affected jaeger Red Hat Hardened Images Not affected llvm Red Hat Hardened Images Not affected llvm21 Red Hat Hardened Images Will not fix nodejs20 Red Hat Hardened Images Will not fix nodejs25 Red Hat Hardened Images Not affected opentelemetry-collector Red Hat Hardened Images Not affected opentelemetry-collector-k8s Red Hat Hardened Images Not affected prometheus3.13 Red Hat Hardened Images Not affected rust Red Hat Hardened Images Not affected swift-lang Red Hat Hardened Images Not affected yarnpkg Red Hat JBoss Enterprise Application Platform 7 Not affected brace-expansion Red Hat JBoss Enterprise Application Platform 7 Not affected jboss-eap-full-maven-repository.zip Red Hat JBoss Enterprise Application Platform 7 Not affected jboss-eap-incremental-maven-repository.zip Red Hat JBoss Enterprise Application Platform 7 Not affected jboss-eap-maven-repository.zip Red Hat JBoss Enterprise Application Platform 7 Not affected jboss-eap-patch.zip Red Hat JBoss Enterprise Application Platform 7 Not affected jboss-eap-runtime-maven-repository.zip Red Hat JBoss Enterprise Application Platform 8 Affected brace-expansion Red Hat JBoss Enterprise Application Platform 8 Affected jboss-eap.1-runtime-maven-repository.zip Red Hat JBoss Enterprise Application Platform 8 Affected jboss-eap-runtime-maven-repository.zip Red Hat JBoss Enterprise Application Platform Expansion Pack Not affected brace-expansion Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-dashboard-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-mlflow-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-mod-arch-automl-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-mod-arch-autorag-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-mod-arch-eval-hub-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-mod-arch-gen-ai-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-mod-arch-maas-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-mod-arch-mlflow-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-mod-arch-model-registry-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/nmstate-console-plugin-rhel9 Red Hat OpenShift Container Platform 4 Not affected openshift4/ose-agent-installer-ui-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-console Red Hat OpenShift Container Platform 4 Affected openshift4/ose-console-rhel9 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-monitoring-plugin-rhel8 Red Hat OpenShift Container Platform 4 Affected openshift4/ose-monitoring-plugin-rhel9 Red Hat Openshift Data Foundation 4 Affected odf4/mcg-core-rhel9 Red Hat Openshift Data Foundation 4 Will not fix odf4/ocs-client-console-rhel9 Red Hat Openshift Data Foundation 4 Affected odf4/odf-console-rhel9 Red Hat Openshift Data Foundation 4 Will not fix odf4/odf-multicluster-console-rhel9 Red Hat OpenShift Dev Spaces Affected devspaces/code-rhel9 Red Hat OpenShift Dev Spaces Affected devspaces/dashboard-rhel9 Red Hat OpenShift Dev Spaces Affected devspaces/jetbrains-ide-rhel9 Red Hat OpenShift Dev Spaces Affected devspaces/openvsx-rhel9 Red Hat OpenShift Dev Spaces Affected devspaces/pluginregistry-rhel9 Red Hat OpenShift Dev Spaces Affected devspaces/udi-rhel9 Red Hat OpenShift GitOps Affected openshift-gitops-1/argocd-rhel8 Red Hat OpenShift GitOps Affected openshift-gitops-1/argocd-rhel9 Red Hat OpenShift Virtualization 4 Not affected container-native-virtualization/kubevirt-console-plugin-rhel9 Red Hat Quay 3 Affected quay/quay-rhel8 Red Hat Quay 3 Affected quay/quay-rhel9 Red Hat Satellite 6 Not affected satellite/iop-advisor-frontend-rhel9 Red Hat Satellite 6 Not affected satellite/iop-host-inventory-frontend-rhel9 Red Hat Satellite 6 Affected satellite/iop-remediations-rhel9 Red Hat Satellite 6 Not affected satellite/iop-vulnerability-frontend-rhel9 Red Hat Single Sign-On 7 Affected brace-expansion Red Hat Trusted Profile Analyzer Affected rhtpa/rhtpa-trustification-service-rhel9 Secrets Management Console for Red Hat OpenShift Will not fix external-secrets-management/console-plugin-rhel9 Self-service automation portal 2 Affected ansible-automation-platform/automation-portal Self-service automation portal 2 Affected ansible-automation-platform/bootc-automation-portal-rhel9 streams for Apache Kafka 2 Not affected brace-expansion streams for Apache Kafka 3 Not affected brace-expansion https://www.cve.org/CVERecord?id=CVE-2026-69152 https://nvd.nist.gov/vuln/detail/CVE-2026-69152 https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031 https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895