CLEANSTART-2026-WA07330: minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects

Q: What access does an attacker need to exploit this issue?

The supplied vector indicates network reachability, low attack complexity, no required privileges, and no user interaction. The impact is limited to availability in the provided scoring data.

Q: Can I determine whether my Cleanstart npm deployment is affected from this advisory?

No affected package versions, fixed versions, configuration prerequisites, or detection indicators are provided. You would need to review the linked advisory or vulnerability records for version-specific applicability and remediation details.

Published Nov 5, 2026

Updated

Security vulnerability affects the npm package. minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects.

Affected Software

1 affected componentFixes available

cleanstart/npm<10.9.2-r1

10.9.2-r1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/npm to a version that resolves this vulnerability.
Fixed in 10.9.2-r1

Event History

Nov 5, 2026

Advisory Published

via OSV·06:32 AM

Data Sourced

via OSV·06:32 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-26996

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The supplied vector indicates network reachability, low attack complexity, no required privileges, and no user interaction. The impact is limited to availability in the provided scoring data.

Can I determine whether my Cleanstart npm deployment is affected from this advisory?

No affected package versions, fixed versions, configuration prerequisites, or detection indicators are provided. You would need to review the linked advisory or vulnerability records for version-specific applicability and remediation details.

CLEANSTART-2026-WA07330: minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Can I determine whether my Cleanstart npm deployment is affected from this advisory?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Can I determine whether my Cleanstart npm deployment is affected from this advisory?