PRISMA-2022-0039 - High vulnerability

[AKhares]

What happened: Vulnerability PRISMA-2022-0039 is found in scan.

What you expected to happen: Need to fix this security risk

How to reproduce it (as minimally and precisely as possible): Its coming in twistlock scan

Report details:

<style> </style>

CVE ID	Compliance ID	Type	Severity	Packages	Source Package	Package Version	Package License	CVSS	Fix Status	Fix Date	Grace Days	Vulnerability Tags	Description	Cause	Published	Custom Labels	Vulnerability Link
PRISMA-2022-0039	49	javascript	high	minimatch		3.0.4	ISC	7.5	fixed in 3.0.5				minimatch package versions before 3.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS). It's possible to cause a denial of service when calling function braceExpand (The regex /\{.*\}/ is vulnerable and can be exploited).				isaacs/minimatch@a8763f4

Anything else we need to know?: N/A

Environment: N/A

• Grafana Image Renderer version: 3.4.0
• Grafana version: N/A
• Installed plugin or remote renderer service: N/A
• OS Grafana Image Renderer is installed on: N/A
• User OS & Browser: N/A
• Others:

[tcullum-rh]

Why does the CVE ID say PRISMA-2022-0039? PRISMA-2022-0039 is not a valid CVE ID. Is there a valid CVE for this?