brace-expansion moves to 2.1.7. The three advisories, two high and one moderate, each describe a way for a crafted pattern to use up the processor or the stack. The patterns Ghost Architect™ Local expands come from its own exclusion presets and your --exclude flags, never from the code it scans, so the exposure was low. This release removes it, and nothing else changes.
Full technical release notes for 7.4.35 are on the changelog, alongside every other Ghost Architect™ Local release.
Ghost Architect™ Local runs on your own hardware.
If you want an evaluation trial, the download page tells you how to get the tarball, verify it, and start the evaluation trial on your own hardware.
Request Ghost Architect™ LocalEJ Wisner, founder of Ghost Architect™. Local pricing is monthly, per team size, with no per-token bill; the numbers are on the pricing page.