# node-brace-expansion security updates

Patch Radar has 8 security fixes for node-brace-expansion, closing 7 CVEs. The newest is DEBIAN-CVE-2026-102278 (2.1.7+~1.1.2-1), released October 9, 2026.

- Web page: https://patchblox.com/security/product/linux/node-brace-expansion
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2026-102278](https://patchblox.com/security/data/fix/linux/debian-cve-2026-102278.md) | Oct 9, 2026 | Debian 14 2.1.7+~1.1.2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-102276](https://patchblox.com/security/data/fix/linux/debian-cve-2026-102276.md) | Oct 9, 2026 | Debian 14 2.1.7+~1.1.2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-102277](https://patchblox.com/security/data/fix/linux/debian-cve-2026-102277.md) | Oct 9, 2026 | Debian 14 2.1.7+~1.1.2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-45149](https://patchblox.com/security/data/fix/linux/debian-cve-2026-45149.md) | Jun 27, 2026 | Debian 14 2.0.3+~1.1.2-3 | High | 1 | 0 |
| [DEBIAN-CVE-2026-33750](https://patchblox.com/security/data/fix/linux/debian-cve-2026-33750.md) | Mar 27, 2026 | Debian 14 2.0.3+~1.1.2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-25547](https://patchblox.com/security/data/fix/linux/debian-cve-2026-25547.md) | Feb 4, 2026 | Debian 14 2.0.3+~1.1.2-2 | High | 1 | 0 |
| [DEBIAN-CVE-2025-5889](https://patchblox.com/security/data/fix/linux/debian-cve-2025-5889.md) | Jun 9, 2025 | Debian 13.5 (trixie) 2.0.1+~1.1.0-2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-5889](https://patchblox.com/security/data/fix/linux/debian-cve-2025-5889.md) | Jun 9, 2025 | Debian 14 2.0.1+~1.1.0-2 | Routine | 1 | 0 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo