CVE-2026-27904 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2026-27904 Interim 1 1 2026-03-05T00:14:58Z current 2026-03-05T00:14:58Z 2026-03-05T00:14:58Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2026-27904 minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extglobs produce regexps with nested unbounded quantifiers (e.g. `(?:(?:a|b)*)*`), which exhibit catastrophic backtracking in V8. With a 12-byte pattern `*(*(*(a|b)))` and an 18-byte non-matching input, `minimatch()` stalls for over 7 seconds. Adding a single nesting level or a few input characters pushes this to minutes. This is the most severe finding: it is triggered by the default `minimatch()` API with no special options, and the minimum viable pattern is only 12 bytes. The same issue affects `+()` extglobs equally. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4 fix the issue. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Module for Web and Scripting 15 SP7 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Module for Web and Scripting 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Module for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for SAP Applications 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Module for SAP Applications 15 SP7 SUSE Linux Enterprise Module for Web and Scripting 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Manager Client Tools for SLE 12 SUSE Manager Client Tools for SLE 15 SUSE Multi-Linux Manager Client Tools for SLE 12 SUSE Multi-Linux Manager Client Tools for SLE 15 openSUSE Leap 15.6 cockpit cockpit-bridge cockpit-devel cockpit-doc cockpit-firewalld cockpit-kdump cockpit-machines cockpit-networkmanager cockpit-packagekit cockpit-packages cockpit-podman cockpit-repos cockpit-selinux cockpit-storaged cockpit-subscriptions cockpit-system cockpit-tukit cockpit-ws cockpit-ws-selinux corepack20 corepack22 firewalld-prometheus-config golang-github-prometheus-prometheus nodejs10 nodejs10-devel nodejs10-docs nodejs12 nodejs12-devel nodejs12-docs nodejs14 nodejs14-devel nodejs14-docs nodejs16 nodejs16-devel nodejs16-docs nodejs18 nodejs18-devel nodejs18-docs nodejs20 nodejs20-devel nodejs20-docs nodejs22 nodejs22-devel nodejs22-docs nodejs24 nodejs24-devel nodejs24-docs nodejs8 nodejs8-devel nodejs8-docs npm10 npm12 npm14 npm16 npm18 npm20 npm22 npm24 npm8 pgadmin4 pgadmin4-cloud pgadmin4-desktop pgadmin4-doc pgadmin4-web pgadmin4-web-uwsgi system-user-pgadmin trento-web velociraptor nodejs16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nodejs16-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nodejs16-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS npm16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nodejs18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nodejs18-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nodejs18-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS npm18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS pgadmin4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS pgadmin4-web as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nodejs18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS nodejs18-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS nodejs18-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS npm18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS nodejs20 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS nodejs20-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS nodejs20-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS npm20 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS pgadmin4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS pgadmin4-web as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS cockpit as a component of SUSE Linux Enterprise Micro 5.2 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.2 cockpit-system as a component of SUSE Linux Enterprise Micro 5.2 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.2 cockpit-machines as a component of SUSE Linux Enterprise Micro 5.2 cockpit-podman as a component of SUSE Linux Enterprise Micro 5.2 cockpit-tukit as a component of SUSE Linux Enterprise Micro 5.2 cockpit as a component of SUSE Linux Enterprise Micro 5.3 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.3 cockpit-networkmanager as a component of SUSE Linux Enterprise Micro 5.3 cockpit-selinux as a component of SUSE Linux Enterprise Micro 5.3 cockpit-storaged as a component of SUSE Linux Enterprise Micro 5.3 cockpit-system as a component of SUSE Linux Enterprise Micro 5.3 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.3 cockpit-machines as a component of SUSE Linux Enterprise Micro 5.3 cockpit-podman as a component of SUSE Linux Enterprise Micro 5.3 cockpit-tukit as a component of SUSE Linux Enterprise Micro 5.3 cockpit as a component of SUSE Linux Enterprise Micro 5.4 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.4 cockpit-networkmanager as a component of SUSE Linux Enterprise Micro 5.4 cockpit-selinux as a component of SUSE Linux Enterprise Micro 5.4 cockpit-storaged as a component of SUSE Linux Enterprise Micro 5.4 cockpit-system as a component of SUSE Linux Enterprise Micro 5.4 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.4 cockpit-machines as a component of SUSE Linux Enterprise Micro 5.4 cockpit-podman as a component of SUSE Linux Enterprise Micro 5.4 cockpit-tukit as a component of SUSE Linux Enterprise Micro 5.4 cockpit as a component of SUSE Linux Enterprise Micro 5.5 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.5 cockpit-networkmanager as a component of SUSE Linux Enterprise Micro 5.5 cockpit-selinux as a component of SUSE Linux Enterprise Micro 5.5 cockpit-storaged as a component of SUSE Linux Enterprise Micro 5.5 cockpit-system as a component of SUSE Linux Enterprise Micro 5.5 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.5 cockpit-machines as a component of SUSE Linux Enterprise Micro 5.5 cockpit-podman as a component of SUSE Linux Enterprise Micro 5.5 cockpit-tukit as a component of SUSE Linux Enterprise Micro 5.5 golang-github-prometheus-prometheus as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 pgadmin4 as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 pgadmin4-doc as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 pgadmin4-web as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 system-user-pgadmin as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 trento-web as a component of SUSE Linux Enterprise Module for SAP Applications 15 SP4 trento-web as a component of SUSE Linux Enterprise Module for SAP Applications 15 SP5 trento-web as a component of SUSE Linux Enterprise Module for SAP Applications 15 SP7 nodejs22 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 nodejs22-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 nodejs22-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 npm22 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 nodejs24 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 nodejs24-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 nodejs24-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 npm24 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 nodejs18 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS nodejs18-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS nodejs18-docs as a component of SUSE Linux Enterprise Server 12 SP5-LTSS npm18 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS nodejs18 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security nodejs10 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs10-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs10-docs as a component of SUSE Linux Enterprise Server 15 SP1-LTSS npm10 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs8 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs8-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs8-docs as a component of SUSE Linux Enterprise Server 15 SP1-LTSS npm8 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP1-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs10 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs10-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs10-docs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS npm10 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs12 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs12-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs12-docs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS npm12 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs14 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs14-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs14-docs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS npm14 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs8 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs8-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs8-docs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS npm8 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP2-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs12 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs12-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs12-docs as a component of SUSE Linux Enterprise Server 15 SP3-LTSS npm12 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs14 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs14-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs14-docs as a component of SUSE Linux Enterprise Server 15 SP3-LTSS npm14 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs16 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs16-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs16-docs as a component of SUSE Linux Enterprise Server 15 SP3-LTSS npm16 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP3-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs16 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nodejs16-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nodejs16-docs as a component of SUSE Linux Enterprise Server 15 SP4-LTSS npm16 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nodejs18 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nodejs18-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nodejs18-docs as a component of SUSE Linux Enterprise Server 15 SP4-LTSS npm18 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP4-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nodejs18 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS nodejs18-devel as a component of SUSE Linux Enterprise Server 15 SP5-LTSS nodejs18-docs as a component of SUSE Linux Enterprise Server 15 SP5-LTSS npm18 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS nodejs20 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS nodejs20-devel as a component of SUSE Linux Enterprise Server 15 SP5-LTSS nodejs20-docs as a component of SUSE Linux Enterprise Server 15 SP5-LTSS npm20 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP5-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP5-LTSS nodejs20 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS nodejs20-devel as a component of SUSE Linux Enterprise Server 15 SP6-LTSS nodejs20-docs as a component of SUSE Linux Enterprise Server 15 SP6-LTSS npm20 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS nodejs22 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS nodejs22-devel as a component of SUSE Linux Enterprise Server 15 SP6-LTSS nodejs22-docs as a component of SUSE Linux Enterprise Server 15 SP6-LTSS npm22 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP6-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP6-LTSS system-user-pgadmin as a component of SUSE Linux Enterprise Server 15 SP6-LTSS cockpit as a component of SUSE Linux Enterprise Server 16.0 cockpit-bridge as a component of SUSE Linux Enterprise Server 16.0 cockpit-devel as a component of SUSE Linux Enterprise Server 16.0 cockpit-doc as a component of SUSE Linux Enterprise Server 16.0 cockpit-firewalld as a component of SUSE Linux Enterprise Server 16.0 cockpit-kdump as a component of SUSE Linux Enterprise Server 16.0 cockpit-networkmanager as a component of SUSE Linux Enterprise Server 16.0 cockpit-packagekit as a component of SUSE Linux Enterprise Server 16.0 cockpit-selinux as a component of SUSE Linux Enterprise Server 16.0 cockpit-storaged as a component of SUSE Linux Enterprise Server 16.0 cockpit-system as a component of SUSE Linux Enterprise Server 16.0 cockpit-ws as a component of SUSE Linux Enterprise Server 16.0 cockpit-ws-selinux as a component of SUSE Linux Enterprise Server 16.0 cockpit-machines as a component of SUSE Linux Enterprise Server 16.0 cockpit-packages as a component of SUSE Linux Enterprise Server 16.0 cockpit-podman as a component of SUSE Linux Enterprise Server 16.0 cockpit-repos as a component of SUSE Linux Enterprise Server 16.0 cockpit-subscriptions as a component of SUSE Linux Enterprise Server 16.0 golang-github-prometheus-prometheus as a component of SUSE Linux Enterprise Server 16.0 corepack22 as a component of SUSE Linux Enterprise Server 16.0 nodejs22 as a component of SUSE Linux Enterprise Server 16.0 nodejs22-devel as a component of SUSE Linux Enterprise Server 16.0 nodejs22-docs as a component of SUSE Linux Enterprise Server 16.0 npm22 as a component of SUSE Linux Enterprise Server 16.0 velociraptor as a component of SUSE Linux Enterprise Server 16.0 nodejs16 as a component of SUSE Linux Enterprise Server Teradata 15 SP4 nodejs18 as a component of SUSE Linux Enterprise Server Teradata 15 SP4 pgadmin4 as a component of SUSE Linux Enterprise Server Teradata 15 SP4 nodejs16 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nodejs16-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nodejs16-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 npm16 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nodejs18 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nodejs18-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nodejs18-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 npm18 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 pgadmin4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 pgadmin4-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 pgadmin4-web as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nodejs18 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 nodejs18-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 nodejs18-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 npm18 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 nodejs20 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 nodejs20-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 nodejs20-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 npm20 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 pgadmin4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 pgadmin4-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 pgadmin4-web as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 nodejs20 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 nodejs20-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 nodejs20-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 npm20 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 nodejs22 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 nodejs22-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 nodejs22-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 npm22 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 pgadmin4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 pgadmin4-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 pgadmin4-web as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 system-user-pgadmin as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 cockpit as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cockpit-bridge as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cockpit-devel as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cockpit-doc as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cockpit-firewalld as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cockpit-kdump as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cockpit-networkmanager as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cockpit-packagekit as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cockpit-selinux as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cockpit-storaged as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cockpit-system as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cockpit-ws as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cockpit-ws-selinux as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cockpit-machines as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cockpit-packages as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cockpit-podman as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cockpit-repos as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cockpit-subscriptions as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cockpit-tukit as a component of SUSE Linux Enterprise Server for SAP applications 16.0 golang-github-prometheus-prometheus as a component of SUSE Linux Enterprise Server for SAP applications 16.0 corepack22 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 nodejs22 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 nodejs22-devel as a component of SUSE Linux Enterprise Server for SAP applications 16.0 nodejs22-docs as a component of SUSE Linux Enterprise Server for SAP applications 16.0 npm22 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 trento-web as a component of SUSE Linux Enterprise Server for SAP applications 16.0 velociraptor as a component of SUSE Linux Enterprise Server for SAP applications 16.0 cockpit as a component of SUSE Linux Micro 6.0 cockpit-bridge as a component of SUSE Linux Micro 6.0 cockpit-networkmanager as a component of SUSE Linux Micro 6.0 cockpit-selinux as a component of SUSE Linux Micro 6.0 cockpit-storaged as a component of SUSE Linux Micro 6.0 cockpit-system as a component of SUSE Linux Micro 6.0 cockpit-ws as a component of SUSE Linux Micro 6.0 cockpit-machines as a component of SUSE Linux Micro 6.0 cockpit-podman as a component of SUSE Linux Micro 6.0 cockpit-tukit as a component of SUSE Linux Micro 6.0 cockpit as a component of SUSE Linux Micro 6.1 cockpit-bridge as a component of SUSE Linux Micro 6.1 cockpit-networkmanager as a component of SUSE Linux Micro 6.1 cockpit-selinux as a component of SUSE Linux Micro 6.1 cockpit-storaged as a component of SUSE Linux Micro 6.1 cockpit-system as a component of SUSE Linux Micro 6.1 cockpit-ws as a component of SUSE Linux Micro 6.1 cockpit-machines as a component of SUSE Linux Micro 6.1 cockpit-podman as a component of SUSE Linux Micro 6.1 cockpit-tukit as a component of SUSE Linux Micro 6.1 golang-github-prometheus-prometheus as a component of SUSE Manager Client Tools for SLE 12 golang-github-prometheus-prometheus as a component of SUSE Manager Client Tools for SLE 15 golang-github-prometheus-prometheus as a component of SUSE Multi-Linux Manager Client Tools for SLE 12 golang-github-prometheus-prometheus as a component of SUSE Multi-Linux Manager Client Tools for SLE 15 firewalld-prometheus-config as a component of openSUSE Leap 15.6 golang-github-prometheus-prometheus as a component of openSUSE Leap 15.6 corepack20 as a component of openSUSE Leap 15.6 nodejs20 as a component of openSUSE Leap 15.6 nodejs20-devel as a component of openSUSE Leap 15.6 nodejs20-docs as a component of openSUSE Leap 15.6 npm20 as a component of openSUSE Leap 15.6 corepack22 as a component of openSUSE Leap 15.6 nodejs22 as a component of openSUSE Leap 15.6 nodejs22-devel as a component of openSUSE Leap 15.6 nodejs22-docs as a component of openSUSE Leap 15.6 npm22 as a component of openSUSE Leap 15.6 pgadmin4 as a component of openSUSE Leap 15.6 pgadmin4-cloud as a component of openSUSE Leap 15.6 pgadmin4-desktop as a component of openSUSE Leap 15.6 pgadmin4-doc as a component of openSUSE Leap 15.6 pgadmin4-web-uwsgi as a component of openSUSE Leap 15.6 system-user-pgadmin as a component of openSUSE Leap 15.6 minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extglobs produce regexps with nested unbounded quantifiers (e.g. `(?:(?:a|b)*)*`), which exhibit catastrophic backtracking in V8. With a 12-byte pattern `*(*(*(a|b)))` and an 18-byte non-matching input, `minimatch()` stalls for over 7 seconds. Adding a single nesting level or a few input characters pushes this to minutes. This is the most severe finding: it is triggered by the default `minimatch()` API with no special options, and the minimum viable pattern is only 12 bytes. The same issue affects `+()` extglobs equally. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4 fix the issue. CVE-2026-27904 SUSE Linux Enterprise Module for Package Hub 15 SP7:golang-github-prometheus-prometheus SUSE Linux Enterprise Module for SAP Applications 15 SP4:trento-web SUSE Linux Enterprise Module for SAP Applications 15 SP5:trento-web SUSE Linux Enterprise Module for SAP Applications 15 SP7:trento-web SUSE Linux Enterprise Server 16.0:golang-github-prometheus-prometheus SUSE Linux Enterprise Server for SAP applications 16.0:golang-github-prometheus-prometheus SUSE Linux Enterprise Server for SAP applications 16.0:trento-web SUSE Manager Client Tools for SLE 12:golang-github-prometheus-prometheus SUSE Manager Client Tools for SLE 15:golang-github-prometheus-prometheus SUSE Multi-Linux Manager Client Tools for SLE 12:golang-github-prometheus-prometheus SUSE Multi-Linux Manager Client Tools for SLE 15:golang-github-prometheus-prometheus openSUSE Leap 15.6:firewalld-prometheus-config openSUSE Leap 15.6:golang-github-prometheus-prometheus important 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H