Packages / Debian 12 (Bookworm) / javascript / node-braces

Package: node-braces (3.0.2+~3.0.1-1)

Fast, comprehensive, bash-like brace expansion implemented in JS

Other Packages Related to node-braces:

dep: [node-fill-range] (>= 7.0.1)
node module to fill in a range of numbers or letters

Download node-braces

Architecture	Package size	Installed size	Files	Package
all	20 KiB	60 KiB	list of files	Download

Chemins de fichiers du paquet (0)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

No package-associated file paths were observed for the displayed build metadata.

Field source: Debian 12 (Bookworm) main amd64

Utiliser ce paquet

OpenFactory peut démarrer ce système d'exploitation dans une machine virtuelle du navigateur, ou lancer une construction qui inclut le nom natif du paquet de cet enregistrement.

Essayer Debian 12 (Bookworm) dans le navigateur Construire une image qui inclut node-braces

Versions, suites et dépôts

Chaque ligne est une métadonnée d'index pour une version, une architecture, une suite et un dépôt. Noms, URL et tailles viennent de la source ; un lien est un emplacement de récupération mutable, pas une redistribution OpenFactory.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
3.0.2+~3.0.1-1	bookworm / main	all	Debian 12 · main · amd64	20 KiB	60 KiB	pool/main/n/node-braces/node-braces_3.0.2+~3.0.1-1_all.deb
3.0.2+~3.0.1-1	bookworm / main	all	Debian 12 · main · arm64	20 KiB	60 KiB	pool/main/n/node-braces/node-braces_3.0.2+~3.0.1-1_all.deb

Field source: Debian 12 (Bookworm) main amd64

Vulnérabilités connues

L’association des paquets est en cours.

CVE Gravité Impact par version

CVE	Gravité	Impact par version
[CVE-2026-93687] Published: Sep 18, 2026, 3:06:02 PM UTC braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust	High(8.7)	Inconnu L’association des paquets est en cours. Observé: Oct 23, 2026, 8:36:56 PM UTC Détails (2) `3.0.2+~3.0.1-1` · all · bookworm Affectée nvd · node-braces · debian · bookworm `3.0.2+~3.0.1-1` · all · bookworm Affectée nvd · node-braces · debian · bookworm
[CVE-2024-4068] Published: Mar 4, 2024, 12:00:00 AM UTC node-braces: CVE-2024-4068	High(7.5)	Inconnu L’association des paquets est en cours. Observé: Oct 28, 2026, 5:37:41 PM UTC Détails (2) `3.0.2+~3.0.1-1` · all · bookworm Affectée dsa · node-braces · debian · bookworm; dsa · node-braces · debian · 12 `3.0.2+~3.0.1-1` · all · bookworm Affectée dsa · node-braces · debian · bookworm; dsa · node-braces · debian · 12
[CVE-2018-1109] Published: Feb 19, 2018, 12:00:00 AM UTC node-braces: CVE-2018-1109	Medium(4)	Inconnu L’association des paquets est en cours. Observé: Oct 23, 2026, 5:33:34 PM UTC Détails (2) `3.0.2+~3.0.1-1` · all · bookworm Non affectée dsa · node-braces · debian · bookworm `3.0.2+~3.0.1-1` · all · bookworm Non affectée dsa · node-braces · debian · bookworm

[CVE-2026-93687]

Published: Sep 18, 2026, 3:06:02 PM UTC

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust

High(8.7)

Inconnu

L’association des paquets est en cours. Observé: Oct 23, 2026, 8:36:56 PM UTC

Détails (2)

3.0.2+~3.0.1-1 · all · bookworm
Affectée
nvd · node-braces · debian · bookworm
3.0.2+~3.0.1-1 · all · bookworm
Affectée
nvd · node-braces · debian · bookworm

[CVE-2024-4068]

Published: Mar 4, 2024, 12:00:00 AM UTC

node-braces: CVE-2024-4068

High(7.5)

Inconnu

L’association des paquets est en cours. Observé: Oct 28, 2026, 5:37:41 PM UTC

Détails (2)

3.0.2+~3.0.1-1 · all · bookworm
Affectée
dsa · node-braces · debian · bookworm; dsa · node-braces · debian · 12
3.0.2+~3.0.1-1 · all · bookworm
Affectée
dsa · node-braces · debian · bookworm; dsa · node-braces · debian · 12

[CVE-2018-1109]

Published: Feb 19, 2018, 12:00:00 AM UTC

node-braces: CVE-2018-1109

Medium(4)

Inconnu

L’association des paquets est en cours. Observé: Oct 23, 2026, 5:33:34 PM UTC

Détails (2)

3.0.2+~3.0.1-1 · all · bookworm
Non affectée
dsa · node-braces · debian · bookworm
3.0.2+~3.0.1-1 · all · bookworm
Non affectée
dsa · node-braces · debian · bookworm

Dernière synchronisation: Oct 29, 2026, 9:06:14 AM UTC

[Catalogue CVE]

Empreintes

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

3.0.2+~3.0.1-1 / allObservé Sep 1, 2026sha256 e7c65a13ca24…74362d1eEmpreinte publiée par la source

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Empreinte publiée par la source (sha256): e7c65a13ca2470249e4042b98d90ae5ecdcac835aa289a9b82b59b4174362d1e

Vérifier le téléchargement

printf '%s  %s\n' 'e7c65a13ca2470249e4042b98d90ae5ecdcac835aa289a9b82b59b4174362d1e' 'node-braces_3.0.2+~3.0.1-1_all.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main amd64

3.0.2+~3.0.1-1 / allObservé Sep 1, 2026sha256 e7c65a13ca24…74362d1eEmpreinte publiée par la source

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Empreinte publiée par la source (sha256): e7c65a13ca2470249e4042b98d90ae5ecdcac835aa289a9b82b59b4174362d1e

Vérifier le téléchargement

printf '%s  %s\n' 'e7c65a13ca2470249e4042b98d90ae5ecdcac835aa289a9b82b59b4174362d1e' 'node-braces_3.0.2+~3.0.1-1_all.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main arm64

Sources

Debian 12 (Bookworm) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Preuve de signature
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Observed SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Result
match verified
Debian 12 (Bookworm) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Preuve de signature
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Observed SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Result
match verified