minimatch versions prior to 11.0.1 contain a denial of service vulnerability caused by an attacker-controlled pattern amplification during glob pattern preprocessing. This leads to exponential growth in internal data structures and quadratic processing time, resulting in excessive CPU and memory consumption. The issue is fixed in version 11.0.1.