CLEANSTART-2026-YN62295: minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects

Q: Does the available advisory identify affected or fixed minimatch versions?

No affected-version range or fixed version is provided in the available record. Review your npm dependency inventory to determine whether minimatch is present, but use an authoritative update for version-specific remediation guidance.

Q: Are exploit prerequisites or configuration-based mitigations documented?

No exploit prerequisites, affected configuration details, or temporary mitigations are provided. The record does not establish whether any particular default configuration is affected.

Published Nov 8, 2026

Updated

Security vulnerability affects the npm package. minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects.

Affected Software

1 affected componentFixes available

cleanstart/npm<11.19.1-r3

11.19.1-r3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/npm to a version that resolves this vulnerability.
Fixed in 11.19.1-r3

Event History

Nov 8, 2026

Advisory Published

via OSV·12:37 AM

Data Sourced

via OSV·12:37 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-118764

Frequently Asked Questions

Does the available advisory identify affected or fixed minimatch versions?

No affected-version range or fixed version is provided in the available record. Review your npm dependency inventory to determine whether minimatch is present, but use an authoritative update for version-specific remediation guidance.

Are exploit prerequisites or configuration-based mitigations documented?

No exploit prerequisites, affected configuration details, or temporary mitigations are provided. The record does not establish whether any particular default configuration is affected.

CLEANSTART-2026-YN62295: minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Does the available advisory identify affected or fixed minimatch versions?

Are exploit prerequisites or configuration-based mitigations documented?

Company

Resources

Contact

Frequently Asked Questions

Does the available advisory identify affected or fixed minimatch versions?

Are exploit prerequisites or configuration-based mitigations documented?