[Deepin Integration]~[v25-Release] fix(node-anymatch): CVE-2026-33671, CVE-2026-33672 by deepin-ci-robot@deepin-community/node-anymatch by deepin-community-ci-bot[bot]

[deepin-bot]

Package information | 软件包信息

包名	版本
node-anymatch	3.1.3+~cs4.6.1-2deepin1

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-3964/testing/ ./

Changelog | 更新信息

node-anymatch (3.1.3+~cs4.6.1-2deepin1) unstable; urgency=medium

• Security fixes for bundled picomatch (CVE-2026-33671, CVE-2026-
  33672) CVE-2026-33671: Fix ReDoS vulnerability in extglob patterns.
  Adds maxExtglobRecursion option to limit nested quantified extglobs.
  CVE-2026-33672: Fix method injection in POSIX character classes.
  Adds proto: null to POSIX_REGEX_SOURCE. Upstream:
  micromatch/picomatch@2.3.1...2.3.2

[deepin-bot]

Integration Test Info

Test suggestion | 测试建议

Influence | 影响范围

ADDITIONAL INFORMATION | 额外补充

[deepin-bot]

IntegrationProjector Notify the author
@deepin: Integrated issue updated

[deepin-bot]

IntegrationProjector Bot
Deepin Testing Integration Project Manager Info
Link to deepin-community/Repository-Integration#3964